CVE-2019-18791

5.4 mediumEPSS 0.5%

Medium (5.4) in lexmark. EPSS 0.5% chance of exploitation in the next 30 days.

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-02-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lexmark:6500e_firmware
lexmark:c734_firmware
lexmark:c736_firmware
lexmark:c746_firmware
lexmark:c748_firmware
lexmark:c792_firmware
lexmark:c925_firmware
lexmark:c950_firmware
lexmark:cs748_firmware
lexmark:cs796_firmware
lexmark:cx310_firmware
lexmark:cx31x_firmware
lexmark:cx410_firmware
lexmark:cx41x_firmware
lexmark:cx510_firmware
lexmark:cx51x_firmware
lexmark:e46x_firmware
lexmark:m1140_firmware
lexmark:m1145_firmware
lexmark:m3150_firmware
lexmark:m3150dn_firmware
lexmark:m5155_firmware
lexmark:m5163_firmware
lexmark:m5163dn_firmware
lexmark:m5170_firmware
lexmark:ms310_firmware
lexmark:ms312_firmware
lexmark:ms315_firmware
lexmark:ms317_firmware
lexmark:ms410_firmware
lexmark:ms415_firmware
lexmark:ms417_firmware
lexmark:ms51x_firmware
lexmark:ms610de_firmware
lexmark:ms610dn_firmware
lexmark:ms617_firmware
lexmark:ms71x_firmware
lexmark:ms810_firmware
lexmark:ms810de_firmware
lexmark:ms811_firmware
lexmark:ms812_firmware
lexmark:ms812de_firmware
lexmark:ms817_firmware
lexmark:ms818_firmware
lexmark:ms91x_firmware
lexmark:mx31x_firmware
lexmark:mx410_firmware
lexmark:mx510_firmware
lexmark:mx511_firmware
lexmark:mx610_firmware

References

Check your stack JSON