Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in W1a75a Firmware · all components

Priority MEDIUM 52

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2023-06-30 No fix listed CWE-918
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.004 Published 2023-06-30 No fix listed CWE-120
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00375 Published 2023-06-30 No fix listed CWE-787
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00433 Published 2023-06-30 No fix listed CWE-120
Priority LOW 30

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00327 Published 2025-11-13 Fixed in 002_2539E CWE-200
Priority LOW 30

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00324 Published 2025-11-13 Fixed in 002_2539E CWE-200
Open these records in search →