Secunia

A vulnerability has been reported in some Xerox Copier/Printer products, which can be exploited by malicious people to conduct script insertion attacks.

Certain unspecified input in the Web Server is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which is then executed in a user's browser session in context of an affected site when a malicious page is viewed.

The vulnerability affects the following products:
* Xerox 4110 Copier/Printer
* Xerox 4590 Copier/Printer
* Xerox 4595 Copier/Printer

Solution
Apply updates (see vendor's advisory for details).

Provided and/or discovered by
The vendor credits Louhi Networks.

Changelog
Further details available in Customer Area

Original Advisory
XRX08-007:
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf

Deep Links
Links available in Customer Area