CVE-2017-2742

HP Web Jetadmin before 10.4 SR2 is vulnerable to a denial-of-service condition (CVE-2017-2742). The vulnerability is described across multiple sources as a DoS risk reachable over network (CVSS v3 base score 7.5, High). Affected component is HP Web Jetadmin software; the root cause is not explici...

CVE-2004-1857

HP Web Jetadmin 7.x (tested on v7.5.2546) is affected by a directory traversal vulnerability in the setinfo.hts script, exploitable via the setinclude parameter to read arbitrary files outside the web root. This requires a remote authenticated attacker to trigger the flaw. No explicit fix/version...

CVE-2004-1856

CVE-2004-1856 affects HP Web JetAdmin 7.5.2546; the vulnerability is in devices_update_printer_fw_upload.hts, where, with no password configured, an attacker can remotely upload arbitrary files to the printer directory. This is a remote code/file upload issue that could lead to unauthorized modif...

CVE-2009-4182

HP Web Jetadmin 10.2 and later uses a remote SQL Server and is affected by multiple vulnerabilities that can allow remote unauthorized access to data and DoS. The root cause involves authentication and encryption weaknesses on the SQL server and insufficient network protections, per HP/SRT bullet...

CVE-2012-2011

HP Web Jetadmin 8.x on Windows is affected by multiple cross-site scripting (XSS) vulnerabilities allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause is multiple XSS flaws in the Web UI; CVE-2012-2011 applies to HP Web Jetadmin 8.x. Impact per sour...

CVE-2011-0278

HP Web Jetadmin on Windows (version 10.2 Service Release 3/4) contains an unspecified local security bypass vulnerability that lets a local user bypass access restrictions and access resources. Base CVSS v2.0 vector AV:L/AC:L/Au:S/C:P/I:P/A:P with a base score of 4.3 (Medium). HP published securi...