CVE-2019-18791
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS...
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
- Record
CVE-2019-18791- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
- Record
CVE-2019-18791- Updated
- 2026-11-02
EUVDEUVD-2019-8496 No score
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
- Record
EUVD-2019-8496- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4v8q-wq3r-x874 No score
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS...
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
- Record
GHSA-4v8q-wq3r-x874- Updated
- 2026-11-02
Affected products
- lexmark 6500e firmware
- lexmark c734 firmware
- lexmark c736 firmware
- lexmark c746 firmware
- lexmark c748 firmware
- lexmark c792 firmware
- lexmark c925 firmware
- lexmark c950 firmware
- lexmark cs748 firmware
- lexmark cs796 firmware
- lexmark cx310 firmware
- lexmark cx31x firmware
Show 68 moreShow less
- lexmark cx410 firmware
- lexmark cx41x firmware
- lexmark cx510 firmware
- lexmark cx51x firmware
- lexmark e46x firmware
- lexmark m1140 firmware
- lexmark m1145 firmware
- lexmark m3150 firmware
- lexmark m3150dn firmware
- lexmark m5155 firmware
- lexmark m5163 firmware
- lexmark m5163dn firmware
- lexmark m5170 firmware
- lexmark ms310 firmware
- lexmark ms312 firmware
- lexmark ms315 firmware
- lexmark ms317 firmware
- lexmark ms410 firmware
- lexmark ms415 firmware
- lexmark ms417 firmware
- lexmark ms51x firmware
- lexmark ms610de firmware
- lexmark ms610dn firmware
- lexmark ms617 firmware
- lexmark ms71x firmware
- lexmark ms810 firmware
- lexmark ms810de firmware
- lexmark ms811 firmware
- lexmark ms812 firmware
- lexmark ms812de firmware
- lexmark ms817 firmware
- lexmark ms818 firmware
- lexmark ms91x firmware
- lexmark mx31x firmware
- lexmark mx410 firmware
- lexmark mx510 firmware
- lexmark mx511 firmware
- lexmark mx610 firmware
- lexmark mx611 firmware
- lexmark mx6500e firmware
- lexmark mx71x firmware
- lexmark mx81x firmware
- lexmark mx91x firmware
- lexmark t65x firmware
- lexmark w850 firmware
- lexmark x46x firmware
- lexmark x548 firmware
- lexmark x65x firmware
- lexmark x73x firmware
- lexmark x74x firmware
- lexmark x792 firmware
- lexmark x86x firmware
- lexmark x925 firmware
- lexmark x95x firmware
- lexmark xc2130 firmware
- lexmark xc2132 firmware
- lexmark xm1135 firmware
- lexmark xm1140 firmware
- lexmark xm1145 firmware
- lexmark xm3150 firmware
- lexmark xm51xx firmware
- lexmark xm71xx firmware
- lexmark xm91x firmware
- lexmark xs548 firmware
- lexmark xs748 firmware
- lexmark xs79x firmware
- lexmark xs925 firmware
- lexmark xs95x firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-18791 is a medium vulnerability (CVSS 5.4) in Lexmark 6500e Firmware, published February 13, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. No source names a fixed version.