Vendors / Hewlett Packard Enterprise Hewlett Packard Enterprise Records 2515 All Threatist records
Exploited (KEV) 7 In CISA KEV
CVSS critical 598 CVSS 9.0–10.0
CVSS high 951 CVSS 7.0–8.9
Exploited now Hewlett Packard Enterprise records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Records 10 records in Laserjet Pro M304-m305 W1a46a Firmware · all components
Priority MEDIUM 52
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01443 · Published 2023-06-30 · No fix listed CWE-918
Priority MEDIUM 52
Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2023-04-28 · No fix listed CWE-787
Priority MEDIUM 52
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2023-04-28 · No fix listed CWE-120
Priority MEDIUM 52
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07348 · Published 2022-03-23 · Fixed in 002_2208A, 2205D +2
Priority MEDIUM 52
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07348 · Published 2022-03-23 · Fixed in 002_2208A, 2205D +2
Priority MEDIUM 51
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00899 · Published 2023-04-28 · No fix listed CWE-120
Priority MEDIUM 40
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.004 · Published 2023-06-30 · No fix listed CWE-120
Priority MEDIUM 40
Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00375 · Published 2023-06-30 · No fix listed CWE-787
Priority MEDIUM 40
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00433 · Published 2023-06-30 · No fix listed CWE-120
Priority MEDIUM 40
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04582 · Published 2022-03-23 · Fixed in 002_2208A, 2205D +2
Open these records in search → All records by CVSS severity
Critical598 High951 Medium866 Low100 No CVSS0