Back to Database
Status published
Medium
CVE-2019-13198
The web application of several Kyocera printers (such as the...
Vulnerability Description
The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Stored XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13198
Credits & Attribution
No credits recorded in the NVD database.
More from kyocera
View All →CVE-2020-25890
The web application of Kyocera printer (ECOSYS M2640IDW) is affected...
Medium
6.1
CVE-2020-23575
A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus....
High
7.5
CVE-2019-6452
Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers...
High
8.8
CVE-2019-13206
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were...
High
8.8
CVE-2019-13205
All configuration parameters of certain Kyocera printers (such as the...
High
7.5
Affected Vendor
kyocera
View all reports →Affected Software
ecosys m5526cdw firmware
Vulnerable Versions:
2r7_2000.001.701
Timeline
Official Publish:
March 13th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.