CVE-2019-19772
Various Lexmark products have reflected XSS in the embedded web server used in older generation...
CVE-2019-19772 is a medium vulnerability (CVSS 5.4) in Lexmark 6500e Firmware, published March 6, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. No source names a fixed version.
- Severity
- 5.4 MediumCVSS 3.1, NVD
- Exploit chance
- 0.65%EPSS, 51st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
Affected products
- lexmark 6500e firmware
- lexmark c734 firmware
- lexmark c736 firmware
- lexmark c746 firmware
- lexmark c748 firmware
- lexmark c792 firmware
- lexmark c925 firmware
- lexmark c950 firmware
- lexmark cs31x firmware
- lexmark cs41x firmware
- lexmark cs51x firmware
- lexmark cs748 firmware
Show 68 moreShow less
- lexmark cs796 firmware
- lexmark cx310 firmware
- lexmark cx410 firmware
- lexmark cx510 firmware
- lexmark e46x firmware
- lexmark m1140 firmware
- lexmark m1145 firmware
- lexmark m3150 firmware
- lexmark m3150dn firmware
- lexmark m5155 firmware
- lexmark m5163 firmware
- lexmark m5163dn firmware
- lexmark m5170 firmware
- lexmark ms310 firmware
- lexmark ms312 firmware
- lexmark ms315 firmware
- lexmark ms317 firmware
- lexmark ms410 firmware
- lexmark ms415 firmware
- lexmark ms417 firmware
- lexmark ms51x firmware
- lexmark ms610de firmware
- lexmark ms610dn firmware
- lexmark ms617 firmware
- lexmark ms71x firmware
- lexmark ms810 firmware
- lexmark ms810de firmware
- lexmark ms811 firmware
- lexmark ms812 firmware
- lexmark ms812de firmware
- lexmark ms817 firmware
- lexmark ms818 firmware
- lexmark ms91x firmware
- lexmark mx31x firmware
- lexmark mx410 firmware
- lexmark mx510 firmware
- lexmark mx511 firmware
- lexmark mx610 firmware
- lexmark mx611 firmware
- lexmark mx6500e firmware
- lexmark mx71x firmware
- lexmark mx81x firmware
- lexmark mx91x firmware
- lexmark t65x firmware
- lexmark w850 firmware
- lexmark x46x firmware
- lexmark x548 firmware
- lexmark x65x firmware
- lexmark x73x firmware
- lexmark x74x firmware
- lexmark x792 firmware
- lexmark x86x firmware
- lexmark x925 firmware
- lexmark x95x firmware
- lexmark xc2130 firmware
- lexmark xc2132 firmware
- lexmark xm1135 firmware
- lexmark xm1140 firmware
- lexmark xm1145 firmware
- lexmark xm3150 firmware
- lexmark xm51xx firmware
- lexmark xm71xx firmware
- lexmark xm91x firmware
- lexmark xs548 firmware
- lexmark xs748 firmware
- lexmark xs79x firmware
- lexmark xs925 firmware
- lexmark xs95x firmware
What each source reports
NVD Score used
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
- Record
CVE-2019-19772- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
- Record
CVE-2019-19772- Updated
- 2026-11-02
EUVDEUVD-2019-9371No score
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
- Record
EUVD-2019-9371- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pfrp-2qvp-2xjjNo score
Various Lexmark products have reflected XSS in the embedded web server used in older generation...
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
- Record
GHSA-pfrp-2qvp-2xjj- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.