VDB
CVE-2023-4675
CVE-2023-4675
PUBLISHED
CVSS 8.699999809265137 HIGH
In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.
EPSS 0.12% · 29.9th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.12%
29.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Xerox FreeFlow Print Server v7 | |
| Amazon | Amazon Linux 2 | |
| Xerox | Xerox FreeFlow Print Server v9 |
Exploit Intelligence
- CIRCL seen: CVE-2023-4675 (circl-sighting)
- CIRCL seen: CVE-2023-4675 (circl-sighting)
- https://www.usom.gov.tr/bildirim/tr-23-0742 (circl)
Timeline
- Dec 29, 2023 CVE Published
- Dec 29, 2023 PoC Published
- Dec 30, 2023 EPSS Score
- Dec 30, 2023 PoC Published
- Jan 28, 2024 EPSS Score
- Feb 25, 2024 EPSS Score
- Mar 25, 2024 EPSS Score
- Apr 23, 2024 EPSS Score
- May 21, 2024 EPSS Score
- Jun 19, 2024 EPSS Score
- Jul 18, 2024 EPSS Score
- Aug 15, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1248.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1248 advisory
- https://security.business.xerox.com/wp-content/uploads/2024/05/Xerox-Security-Bulletin-XRX24-010-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf advisory
- https://alas.aws.amazon.com/AL2/ALAS-2024-2688.html advisory
- https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf advisory