[security bulletin] HPSBPI02945 rev.1 - HP Officejet Pro 8500 (A909) All-in-One Printer, Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04035829 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04035829 Version: 1 HPSBPI02945 rev....

CVE-2013-4845

The CVE-2013-4845 issue affects HP Officejet Pro 8500 (A909) All-in-One Printer web interface, where a cross-site scripting (XSS) vulnerability could allow an attacker to inject arbitrary script via unspecified vectors. Affected firmware/web context is the printer’s web UI; exposed impact is user...