Priority LOW 30
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00327 · Published 2025-11-13 · Fixed in 002_2539E CWE-200
Priority LOW 30
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00324 · Published 2025-11-13 · Fixed in 002_2539E CWE-200
Priority LOW 36
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0033 · Published 2025-07-30 · No fix listed CWE-200
Priority LOW 30
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00402 · Published 2024-05-23 · No fix listed CWE-306
Priority MEDIUM 40
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.004 · Published 2023-06-30 · No fix listed CWE-120
Priority MEDIUM 40
Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00375 · Published 2023-06-30 · No fix listed CWE-787
Priority MEDIUM 40
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00433 · Published 2023-06-30 · No fix listed CWE-120
Priority MEDIUM 52
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01443 · Published 2023-06-30 · No fix listed CWE-918
Priority MEDIUM 52
Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2023-04-28 · No fix listed CWE-787
Priority MEDIUM 52
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2023-04-28 · No fix listed CWE-120
Priority MEDIUM 51
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00899 · Published 2023-04-28 · No fix listed CWE-120
Priority MEDIUM 53
Certain HP Print Products are potentially vulnerable to Remote Code Execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01974 · Published 2022-09-26 · No fix listed
Priority MEDIUM 52
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07348 · Published 2022-03-23 · Fixed in 002_2208A, 2205D +2
Priority MEDIUM 40
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04582 · Published 2022-03-23 · Fixed in 002_2208A, 2205D +2
Priority MEDIUM 52
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07348 · Published 2022-03-23 · Fixed in 002_2208A, 2205D +2