Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Priority LOW 30

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00327 Published 2025-11-13 Fixed in 002_2539E CWE-200
Priority LOW 30

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00324 Published 2025-11-13 Fixed in 002_2539E CWE-200
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.004 Published 2023-06-30 No fix listed CWE-120
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00375 Published 2023-06-30 No fix listed CWE-787
Priority MEDIUM 40

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00433 Published 2023-06-30 No fix listed CWE-120
Priority MEDIUM 52

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2023-06-30 No fix listed CWE-918