CVE-2024-47801 HIGH

CVE-2024-47801

Vendor Sharp Corporation
Product Sharp Digital Full-color MFPs and Monochrome MFPs
Weakness CWE-79 · XSS
Published October 25, 2024
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

7.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

Key dates

02Disclosure timeline

October 25, 2024 CVE published
October 25, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-0601 Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2013-10026 Mail Subscribe List Plugin index.php cross site scripting CVE-2025-64615 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2023-40196 WordPress ImageRecycle pdf & image compression Plugin <= 3.1.11 is vulnerable to Cross Site Scripting (XSS) CVE-2024-52453 WordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability