Unauthorized Access Vulnerability in HP ENVY 5530

The HP ENVY 5530 is an A4 inkjet MFP from HP. The HP ENVY 5530 suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

NVIDIA® GPU Display Driver April 2021 Security Updates

NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA® GPU Display Driver which may allow escalation of privilege, arbitrary code execution, denial of service, and information disclosure. Learn about the software vulnerabilities of your system and resolve them by downloading...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

Cross site scripting

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-26582: Improper Neutralization of Input During Web Page Generation

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

VulnCheck KEV: CVE-2014-2617

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104...

Unauthorized Access Vulnerability in HP Officejet Pro Printer Management Page

Hewlett-Packard Trading Shanghai Co., Ltd. was registered and established on February 8, 1999 in the Market Supervision Administration of the Free Trade Zone. The company's business scope includes computer equipment, printing equipment, imaging equipment, electronic products and related parts of...

Reflected XSS vulnerability in hp-application-automation-tools-plugin

hp-application-automation-tools-plugin 6.7 and earlier does not escape user input in a form validation response. This results in a reflected cross-site scripting XSS vulnerability. hp-application-automation-tools-plugin 6.8 escapes user input in the affected form validation response. NOTE: A...

esc bug fix and enhancement update

The esc packages contain the Enterprise Security Client ESC, which allows the user to manage security smart cards. The primary function of the tool is to enroll smart cards, so that they can be used for common cryptographic operations, such as to secure e-mail and website access. Bug Fixes and...

Security Bulletin: WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2021-23839, CVE-2021-23840 and CVE-2021-23841

Summary WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2021-23839, CVE-2021-23840 and CVE-2021-23841 Vulnerability Details CVEID: CVE-2021-23839 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by incorrect SSLv2 rollback protection...

HPSBPI03723 rev. 1 - Certain HP LaserJet, HP LaserJet Pro, HP PageWide, HP PageWide Pro, HP inkjet, HP OfficeJet software and certain applications - Arbitrary code execution

Potential Security Impact Arbitrary code execution Source: HP, HP Product Security Response Team PSRT Reported by: Honc, Arno Tsai, Subodh Kumar VULNERABILITY SUMMARY During installation with certain driver software or application packages an arbitrary code execution could occur. RESOLUTION HP ha...

HPSBGN03722 rev. 1 - HP Support Assistant Weak ACL and DLL Loading Vulnerability

Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported by: Rémi ESCOURROU @remiescourrou VULNERABILITY SUMMARY A weak ACL may potentially allow an unauthorized person to load arbitrary code. RESOLUTION A patch was released on March 10,...

HPSBPI03720 rev. 1 - Software Vulnerability with Certain HP OfficeJet and PageWide Solutions

Potential Security Impact Local Code Execution Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has identified a security vulnerability with the I.R.I.S. OCR Optical Character Recognition software available with HP PageWide and OfficeJet printer software installations...

HP / HPE Systems Insight Manager (SIM) Detection (HTTP)

HTTP based detection of HP / HPE Systems Insight Manager SIM. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Unauthorized Access Vulnerability in HP LaserJet Pro MFP Series Printers

The HP LaserJet Pro MFP series of printers is an all-in-one printer from HP. An unauthorized access vulnerability exists in the HP LaserJet Pro MFP series printers, which can be exploited by an attacker to gain direct access to the printer control interface without logging in...

Intel® PROSet/Wireless WiFi and Killer™ Driver February 2021 Security Update

Intel has informed HP of a potential security vulnerability identified in some Intel® PROSet/Wireless WiFi and Killer™ drivers for Windows 10 which may allow information disclosure or denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Intel has releas...

HPSBHF03719 rev. 3 - Intel® Graphics Drivers February 2021 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerabilities identified in some Intel® Graphics Drivers whi...