HPSBPI03648 rev. 1 - HP Enterprise Printers - Potential Redirection Page Cross-Site Scripting After Clicking Third-Party Malicious Link

Potential Security Impact Cross-Site Scripting VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link. RESOLUTION HP has...

HPSBHF03649 rev. 3 - Intel Rapid Storage Technology (RST) December 2019 Security Updates

Potential Security Impact Escalation of privilege. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY A potential security vulnerability has been identified in the Intel Rapid Storage Technology RST which may allow escalation of privilege. RESOLUTION Intel...

Security Bulletin: IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552

Summary IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552 Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This...

Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities (CVE-2019-1547,CVE-2019-1549, CVE-2019-1563)

Summary IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2019-1547, CVE-2019-1549 and CVE-2019-1563 Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code...

The vulnerability of the device performance information collection application HP Touchpoint Analytics, due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the HP Touchpoint Analytics performance monitoring application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using malicious DLL files...

HPSBPI03646 rev.1 - Certain HP Enterprise MFP products: Elevation of Privilege

Potential Security Impact Elevation of privilege VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP multifunction printers MFP which may lead to elevation of privilege. RESOLUTION HP has provided firmware updates for potentially impacted printers for the...

HPSBGN03632 rev. 1 - HP SoftPaq Installer Vulnerability

Potential Security Impact Execution of Arbitrary Code, Escalation of Privilege. Source: HP, HP Product Security Response Team PSRT Reported by: Pierre-Alexandre Braeken; Eran Shimony VULNERABILITY SUMMARY A potential security vulnerability has been identified with a version of the HP Softpaq...

HP Access Control Elevation of Privilege Vulnerability

HP Access Control is a print machine access control program. A security vulnerability exists in versions of HP Access Control prior to 16.7. An attacker could exploit the vulnerability to elevate privileges...

HP Samsung Mobile Print Information Disclosure Vulnerability

HP Samsung Mobile Print is a laser printer device. A security vulnerability exists in the HP Samsung Mobile Print configuration information, which can be exploited by a remote attacker to submit a special request that could obtain sensitive information...

Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552

Summary WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552 Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. Thi...

Security Bulletin: WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities (CVE-2019-1547,CVE-2019-1549, CVE-2019-1563)

Summary WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2019-1547, CVE-2019-1549 and CVE-2019-1563 Vulnerability Details CVEID: CVE-2019-1563 DESCRIPTION: In situations where an attacker receives automated notification of the success or failure of a decrypti...

HP Printers XSS Vulnerability (HPSBPI03624)

Multiple HP printers are vulnerable to a cross-site scripting vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP DeskJet 3630 Printers CSRF Vulnerability (HPSBPI03613)

Certain HP DeskJet 3630 All-in-One Printers have a cross-site request forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Design/Logic Flaw

389 Directory Server before 1.2.7.1 aka Red Hat Directory Server 8.2 and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password nsslapd-rootpw in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensiti...

CVE-2019-6319

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6319

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

Cross site request forgery (csrf)

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6330

A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability could potentially grant elevation of privilege...

CVE-2019-6320

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6330

A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability could potentially grant elevation of privilege...