{"id":"CVE-2006-6468","aliases":["EUVD-2006-6451","GHSA-xxmj-957m-hg64"],"status":"published","title":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...","description":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a \"Validate Repository SSL Certificate\" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates.","severity":{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00268,"percentile":0.19081,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-12-11T18:00:00Z","modified":"2026-06-16T22:33:11Z","products":[{"vendor":"xerox","product":"workcentre"}],"references":[{"url":"http://secunia.com/advisories/23265","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6468"},{"url":"https://github.com/advisories/GHSA-xxmj-957m-hg64"}],"sources":{"cve":[{"id":"CVE-2006-6468","description":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a \"Validate Repository SSL Certificate\" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates.","status":"published","published":"2006-12-11T18:00:00Z","modified":"2024-09-16T22:31:16.582Z","updated_at":"2026-11-02T14:33:50.738595Z"}],"euvd":[{"id":"EUVD-2006-6451","description":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a \"Validate Repository SSL Certificate\" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates.","status":"published","published":"2006-12-11T18:00:00Z","modified":"2024-09-16T22:31:16Z","updated_at":"2026-11-03T00:55:02.001238Z"}],"ghsa":[{"id":"GHSA-xxmj-957m-hg64","title":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...","description":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a \"Validate Repository SSL Certificate\" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates.","status":"published","published":"2022-05-01T07:38:09Z","modified":"2023-01-31T05:02:31Z","updated_at":"2026-11-02T14:48:16.940122Z"}],"nvd":[{"id":"CVE-2006-6468","description":"Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a \"Validate Repository SSL Certificate\" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates.","status":"published","published":"2006-12-11T18:28:00Z","modified":"2026-06-16T22:33:11.227Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:09.852738Z"}]}}