1. Home
  2. CVE Database
  3. CVE-2024-55926
HIGH · 7.6

CVE-2024-55926

A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation. By exploiting improper validation of headers, attacke...

Vulnerability Description

A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation. By exploiting improper validation of headers, attackers can gain unauthorized access to data

CVSS Score

7.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
XeroxWorkplace Suite< 5.6.701.9

Related Weaknesses (CWE)

CWE-22CWE-434

References

FAQ

What is CVE-2024-55926?

CVE-2024-55926 is a vulnerability with a CVSS score of 7.6 (HIGH). A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation. By exploiting improper validation of headers, attacke...

How severe is CVE-2024-55926?

CVE-2024-55926 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-55926?

Check the references section above for vendor advisories and patch information. Affected products include: Xerox Workplace Suite.