Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Laserjet Pro M304-m305 W1a46a Firmware · all components

Priority MEDIUM 52

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2023-06-30 No fix listed CWE-918
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.004 Published 2023-06-30 No fix listed CWE-120
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00375 Published 2023-06-30 No fix listed CWE-787
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00433 Published 2023-06-30 No fix listed CWE-120
Open these records in search →