VULNERABILITY INTELLIGENCE

CVE-2019-10880

CVSS score10 HIGH

EPSS probability8.47%

CISA KEVNot currently listed

Published2019-04-12

Last modified2026-06-17

Description

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.