CVE-2018-17309

On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

• CWE-79

• http://packetstormsecurity.com/files/149493/RICOH-MP-C406Z-Printer-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/149493/RICOH-MP-C406Z-Printer-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry

Published

Sep 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17298An issue was discovered in Enalean Tuleap before 10.5. Reset…
• CVE-2018-1730IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External …7.1
• CVE-2018-17300Stored XSS exists in CuppaCMS through 2018-09-03 via an admi…4.8
• CVE-2018-17301Reflected XSS exists in client/res/templates/global-search/n…
• CVE-2018-17302Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.…
• CVE-2018-17305UiPath Orchestrator through 2018.2.4 allows any authenticate…
• CVE-2018-1731IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.…4.8
• CVE-2018-17310On the RICOH MP C1803 JPN printer, HTML Injection and Stored…
• CVE-2018-17311On the RICOH MP C6503 Plus printer, HTML Injection and Store…
• CVE-2018-17312On the RICOH Aficio MP 301 printer, HTML Injection and Store…
• CVE-2018-17313On the RICOH MP C307 printer, HTML Injection and Stored XSS …
• CVE-2018-17314On the RICOH Aficio MP 305+ printer, HTML Injection and Stor…