{"cve":"CVE-2019-19772","nvd":{"published":"2020-03-06T22:15:11.370","modified":"2026-06-17T02:27:13.380","status":"Modified","description":"Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4},"cwes":["CWE-79"],"references":["http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US","http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US"],"products":["lexmark:6500e_firmware","lexmark:c734_firmware","lexmark:c736_firmware","lexmark:c746_firmware","lexmark:c748_firmware","lexmark:c792_firmware","lexmark:c925_firmware","lexmark:c950_firmware","lexmark:cs31x_firmware","lexmark:cs41x_firmware","lexmark:cs51x_firmware","lexmark:cs748_firmware","lexmark:cs796_firmware","lexmark:cx310_firmware","lexmark:cx410_firmware","lexmark:cx510_firmware","lexmark:e46x_firmware","lexmark:m1140_firmware","lexmark:m1145_firmware","lexmark:m3150_firmware","lexmark:m3150dn_firmware","lexmark:m5155_firmware","lexmark:m5163_firmware","lexmark:m5163dn_firmware","lexmark:m5170_firmware","lexmark:ms310_firmware","lexmark:ms312_firmware","lexmark:ms315_firmware","lexmark:ms317_firmware","lexmark:ms410_firmware","lexmark:ms415_firmware","lexmark:ms417_firmware","lexmark:ms51x_firmware","lexmark:ms610de_firmware","lexmark:ms610dn_firmware","lexmark:ms617_firmware","lexmark:ms71x_firmware","lexmark:ms810_firmware","lexmark:ms810de_firmware","lexmark:ms811_firmware","lexmark:ms812_firmware","lexmark:ms812de_firmware","lexmark:ms817_firmware","lexmark:ms818_firmware","lexmark:ms91x_firmware","lexmark:mx31x_firmware","lexmark:mx410_firmware","lexmark:mx510_firmware","lexmark:mx511_firmware","lexmark:mx610_firmware"],"source":"nvd","synced_at":"2026-10-19T21:02:53.949909883+00:00"},"epss":{"cve":"CVE-2019-19772","score":0.00653,"percentile":0.51282,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}