{"id":"CVE-2019-19772","aliases":["EUVD-2019-9371","GHSA-pfrp-2qvp-2xjj"],"status":"published","title":"Various Lexmark products have reflected XSS in the embedded web server used in older generation...","description":"Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content\u0026id=TE935\u0026locale=en\u0026userlocale=EN_US.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00653,"percentile":0.51548,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2020-03-06T21:01:54Z","modified":"2026-06-17T02:27:13Z","products":[{"vendor":"lexmark","product":"6500e_firmware"},{"vendor":"lexmark","product":"c734_firmware"},{"vendor":"lexmark","product":"c736_firmware"},{"vendor":"lexmark","product":"c746_firmware"},{"vendor":"lexmark","product":"c748_firmware"},{"vendor":"lexmark","product":"c792_firmware"},{"vendor":"lexmark","product":"c925_firmware"},{"vendor":"lexmark","product":"c950_firmware"},{"vendor":"lexmark","product":"cs31x_firmware"},{"vendor":"lexmark","product":"cs41x_firmware"},{"vendor":"lexmark","product":"cs51x_firmware"},{"vendor":"lexmark","product":"cs748_firmware"},{"vendor":"lexmark","product":"cs796_firmware"},{"vendor":"lexmark","product":"cx310_firmware"},{"vendor":"lexmark","product":"cx410_firmware"},{"vendor":"lexmark","product":"cx510_firmware"},{"vendor":"lexmark","product":"e46x_firmware"},{"vendor":"lexmark","product":"m1140_firmware"},{"vendor":"lexmark","product":"m1145_firmware"},{"vendor":"lexmark","product":"m3150_firmware"},{"vendor":"lexmark","product":"m3150dn_firmware"},{"vendor":"lexmark","product":"m5155_firmware"},{"vendor":"lexmark","product":"m5163_firmware"},{"vendor":"lexmark","product":"m5163dn_firmware"},{"vendor":"lexmark","product":"m5170_firmware"},{"vendor":"lexmark","product":"ms310_firmware"},{"vendor":"lexmark","product":"ms312_firmware"},{"vendor":"lexmark","product":"ms315_firmware"},{"vendor":"lexmark","product":"ms317_firmware"},{"vendor":"lexmark","product":"ms410_firmware"},{"vendor":"lexmark","product":"ms415_firmware"},{"vendor":"lexmark","product":"ms417_firmware"},{"vendor":"lexmark","product":"ms51x_firmware"},{"vendor":"lexmark","product":"ms610de_firmware"},{"vendor":"lexmark","product":"ms610dn_firmware"},{"vendor":"lexmark","product":"ms617_firmware"},{"vendor":"lexmark","product":"ms71x_firmware"},{"vendor":"lexmark","product":"ms810_firmware"},{"vendor":"lexmark","product":"ms810de_firmware"},{"vendor":"lexmark","product":"ms811_firmware"},{"vendor":"lexmark","product":"ms812_firmware"},{"vendor":"lexmark","product":"ms812de_firmware"},{"vendor":"lexmark","product":"ms817_firmware"},{"vendor":"lexmark","product":"ms818_firmware"},{"vendor":"lexmark","product":"ms91x_firmware"},{"vendor":"lexmark","product":"mx31x_firmware"},{"vendor":"lexmark","product":"mx410_firmware"},{"vendor":"lexmark","product":"mx510_firmware"},{"vendor":"lexmark","product":"mx511_firmware"},{"vendor":"lexmark","product":"mx610_firmware"},{"vendor":"lexmark","product":"mx611_firmware"},{"vendor":"lexmark","product":"mx6500e_firmware"},{"vendor":"lexmark","product":"mx71x_firmware"},{"vendor":"lexmark","product":"mx81x_firmware"},{"vendor":"lexmark","product":"mx91x_firmware"},{"vendor":"lexmark","product":"t65x_firmware"},{"vendor":"lexmark","product":"w850_firmware"},{"vendor":"lexmark","product":"x46x_firmware"},{"vendor":"lexmark","product":"x548_firmware"},{"vendor":"lexmark","product":"x65x_firmware"},{"vendor":"lexmark","product":"x73x_firmware"},{"vendor":"lexmark","product":"x74x_firmware"},{"vendor":"lexmark","product":"x792_firmware"},{"vendor":"lexmark","product":"x86x_firmware"},{"vendor":"lexmark","product":"x925_firmware"},{"vendor":"lexmark","product":"x95x_firmware"},{"vendor":"lexmark","product":"xc2130_firmware"},{"vendor":"lexmark","product":"xc2132_firmware"},{"vendor":"lexmark","product":"xm1135_firmware"},{"vendor":"lexmark","product":"xm1140_firmware"},{"vendor":"lexmark","product":"xm1145_firmware"},{"vendor":"lexmark","product":"xm3150_firmware"},{"vendor":"lexmark","product":"xm51xx_firmware"},{"vendor":"lexmark","product":"xm71xx_firmware"},{"vendor":"lexmark","product":"xm91x_firmware"},{"vendor":"lexmark","product":"xs548_firmware"},{"vendor":"lexmark","product":"xs748_firmware"},{"vendor":"lexmark","product":"xs79x_firmware"},{"vendor":"lexmark","product":"xs925_firmware"},{"vendor":"lexmark","product":"xs95x_firmware"}],"references":[{"url":"http://support.lexmark.com/index?page=content\u0026id=TE935\u0026locale=en\u0026userlocale=EN_US","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19772"},{"url":"https://github.com/advisories/GHSA-pfrp-2qvp-2xjj"}],"sources":{"cve":[{"id":"CVE-2019-19772","description":"Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content\u0026id=TE935\u0026locale=en\u0026userlocale=EN_US.","status":"published","published":"2020-03-06T21:01:54Z","modified":"2024-08-05T02:25:12.668Z","updated_at":"2026-11-02T14:20:20.74896Z"}],"euvd":[{"id":"EUVD-2019-9371","description":"Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content\u0026id=TE935\u0026locale=en\u0026userlocale=EN_US.","status":"published","published":"2020-03-06T21:01:54Z","modified":"2024-08-05T02:25:12Z","updated_at":"2026-11-03T02:40:24.313121Z"}],"ghsa":[{"id":"GHSA-pfrp-2qvp-2xjj","title":"Various Lexmark products have reflected XSS in the embedded web server used in older generation...","description":"Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content\u0026id=TE935\u0026locale=en\u0026userlocale=EN_US.","status":"published","published":"2022-05-24T17:10:19Z","modified":"2023-01-29T05:01:41Z","updated_at":"2026-11-02T14:44:53.556707Z"}],"nvd":[{"id":"CVE-2019-19772","description":"Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content\u0026id=TE935\u0026locale=en\u0026userlocale=EN_US.","status":"published","published":"2020-03-06T22:15:11.37Z","modified":"2026-06-17T02:27:13.38Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:05:45.254119Z"}]}}