CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
26.2%
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
Vendor | Product | Version | CPE |
---|---|---|---|
hp | cc419a_firmware | * | cpe:2.3:o:hp:cc419a_firmware:*:*:*:*:*:*:*:* |
hp | cc419a | - | cpe:2.3:h:hp:cc419a:-:*:*:*:*:*:*:* |
hp | cc420a_firmware | * | cpe:2.3:o:hp:cc420a_firmware:*:*:*:*:*:*:*:* |
hp | cc420a | - | cpe:2.3:h:hp:cc420a:-:*:*:*:*:*:*:* |
hp | cc421a_firmware | * | cpe:2.3:o:hp:cc421a_firmware:*:*:*:*:*:*:*:* |
hp | cc421a | - | cpe:2.3:h:hp:cc421a:-:*:*:*:*:*:*:* |
hp | ce709a_firmware | * | cpe:2.3:o:hp:ce709a_firmware:*:*:*:*:*:*:*:* |
hp | ce709a | - | cpe:2.3:h:hp:ce709a:-:*:*:*:*:*:*:* |
hp | ce708a_firmware | * | cpe:2.3:o:hp:ce708a_firmware:*:*:*:*:*:*:*:* |
hp | ce708a | - | cpe:2.3:h:hp:ce708a:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
26.2%