CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

CVE-2022-41830

CVE-2022-41830 describes a stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers. A remote authenticated attacker with administrative privileges can inject arbitrary script via the web interface. Affected products include TASKalfa and ECOSYS series (e.g., TASKa...

CVE-2022-41807

CVE-2022-41807 describes a missing authorization vulnerability in Kyocera Document Solutions MFPs and printers, allowing a network-adjacent attacker to alter product settings without authentication by sending a crafted request. The affected products span multiple Kyocera lines, including TASKalfa...

CVE-2022-41798

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

CVE-2022-41830

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci,...

CVE-2022-41798

The CVE-2022-41798 issue affects Kyocera Document Solutions MFPs and printers, where session information is easily guessable. This could allow a network-adjacent attacker to log in by spoofing a user with guessed session data. Affected models span multiple product lines, including TASKalfa and EC...

CVE-2021-3821

CVE-2021-3821 affects HP multifunction printers (MFPs) when running HP Workpath solutions, with potential Denial of Service. The connected documents consistently reference DoS impact for potentially affected products, and the NVD metrics list a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK ...

Design/Logic Flaw

A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution...

CVE-2019-18912

The CVE-2019-18912 entry concerns HP printers/MFPs with Troy solutions and FutureSmart Firmware 4.9 or 4.9.0.1, where the issue may cause instability in the affected solution. Connected sources (Red Hat advisory and HP bulletin) confirm affected models and provide remediation guidance. The HP HPS...

CVE-2019-18914

CVE-2019-18914 concerns multiple HP printers and MFPs where a poorly filtered third‑party link can trigger Cross‑Site Scripting in a client browser when clicked. Affected products include various HP Color LaserJet and Enterprise/Managed flow MFPs (e.g., CM4540 MFP, M880z/ M552, M651/M652/M653, M5...

CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

Cross site scripting

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

CVE-2021-3662

CVE-2021-3662 affects HP Enterprise LaserJet and PageWide MFPs, with a stored cross-site scripting (XSS) vulnerability in printer software. The issue arises from insufficient input filtering/escaping, enabling user-supplied data to be stored and potentially executed in a privileged context. Publi...

CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

Certain HP Enterprise LaserJet MFPs, HP Enterprise PageWide MFPs, HP Digital Sender - Stored cross site scripting (XSS)

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS. Update your printer software...

Unauthorized Access Vulnerability in Fuji Xerox (China) Limited DocuPrint P455 d

Fuji Xerox China Co., Ltd. provides printers and MFPs suitable for small and medium-sized enterprises and individual households, color digital multifunctionals that can meet the different document management needs of enterprises, production digital printers, and large format electrostatic digital...

Ricoh (China) Unauthorized Access Vulnerability in Various Products of Ricoh (China) Investment Co.

Ricoh China Investment Co., Ltd. provides services and solutions such as document output management services and IT solutions such as office image processing equipment e.g., MFPs, printers, etc., production digital printers, and more. An unauthorized access vulnerability exists in various Ricoh...

HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Broadcom VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. A Broadcom wireless vulnerability known as "Kr00k" CVE-2019-1512...

Cross site request forgery (csrf)

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege...

CVE-2018-5921

CVE-2018-5921 is a CSRF vulnerability affecting certain HP printers and MFPs (firmware versions including 2405129_000052 and related FutureSmart platforms). The issue could allow remote elevation of privilege via cross-site request forgery, as described in HP’s security bulletin for Enterprise an...