CVE-2024-0407

The CVE concerns HP Enterprise LaserJet and HP LaserJet Managed Printers. Affected component: the device’s certificate store used for outbound connections to services enabled by some solutions. Root cause: connections may have been trusted without the appropriate CA certificate, leading to inform...

CVE-2025-26508

HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers are affected by CVE-2025-26508 (and related CVE-2025-26507) due to remote code execution and elevation of privilege when processing PostScript print jobs. Affected models include various HP LaserJet printers; root cause cen...

CVE-2021-39238

CVE-2021-39238 affects HP printers: HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, and HP PageWide Managed products are vulnerable to a potential buffer overflow in printer firmware. Impact details in sources vary, with references noting possible remote code execution, DoS, ...

CVE-2025-26507

CVE-2025-26507 concerns HP LaserJet Pro, Enterprise, and Managed printers potentially allowing Remote Code Execution and Elevation of Privilege when processing PostScript print jobs. The connected documents corroborate an RCE/EoP risk tied to PostScript processing and consistently advise updating...

CVE-2019-6334

CVE-2019-6334 affects HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers. The issue concerns a signature-check mechanism for installed applications that may allow arbitrary code execution. The HP advisory (HP C06447795) confirms a risk of execution of arbitrary code and pr...

CVE-2021-39237

CVE-2021-39237 affects HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers. The entry documents an information-disclosure vulnerability in these devices, with impact on confidentiality (partial per CVSSv2; high per CVSSv3.1) and no shown impact on integrity/availabilit...

CVE-2019-18914

CVE-2019-18914 concerns multiple HP printers and MFPs where a poorly filtered third‑party link can trigger Cross‑Site Scripting in a client browser when clicked. Affected products include various HP Color LaserJet and Enterprise/Managed flow MFPs (e.g., CM4540 MFP, M880z/ M552, M651/M652/M653, M5...

CVE-2021-3662

CVE-2021-3662 affects HP Enterprise LaserJet and PageWide MFPs, with a stored cross-site scripting (XSS) vulnerability in printer software. The issue arises from insufficient input filtering/escaping, enabling user-supplied data to be stored and potentially executed in a privileged context. Publi...

CVE-2019-18912

The CVE-2019-18912 entry concerns HP printers/MFPs with Troy solutions and FutureSmart Firmware 4.9 or 4.9.0.1, where the issue may cause instability in the affected solution. Connected sources (Red Hat advisory and HP bulletin) confirm affected models and provide remediation guidance. The HP HPS...