WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor hp✕
Overview 2,346 matches · 42 in Waratek scope · 35 protected · 24 exploited · 7 CISA KEV · 239 public PoC · 115 EPSS ≥ 0.5
2,346matches 42in Waratek scope1.8% 35protected1.5% 24exploited1.0% 7CISA KEV0.3% 239public PoC10.2% 115EPSS ≥ 0.54.9%
Protected by Waratek 35 1.5% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 7 0.3% Outside Waratek scope 34 1.4% Not applicable 2,270 96.8% Withdrawn CVE 0 0.0%
Critical 248 10.6% High 1,190 50.7% Medium 813 34.7% Low 95 4.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 35 1.5% partly blocked 0 0.0% not blocked 2,311 98.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 24 1.0% Working exploit published 217 9.2% Proof of concept only 5 0.2% Forecast only 22 0.9% No public exploit 2,078 88.6%
split by peak 309 / year
Not applicable: 2,270Outside Waratek scope: 34No exploit published: 7Protected by Waratek: 35 Low: 95Medium: 813High: 1,190Critical: 248 not blocked: 2,311blocked by ARMR today: 35 No public exploit: 2,078Forecast only: 22Proof of concept only: 5Working exploit published: 217Exploited: 24
19901 Not applicable1 High1 not blocked1 No public exploit1 19911 Not applicable1 High1 not blocked1 No public exploit1 19920 19931 Not applicable1 Medium1 not blocked1 No public exploit1 19948 Not applicable8 High3 Medium5 not blocked8 No public exploit8 19951 Not applicable1 High1 not blocked1 No public exploit1 199619 Not applicable19 High12 Medium3 Low4 not blocked19 Working exploit published2 No public exploit17 199729 Not applicable29 High15 Medium13 Low1 not blocked29 Working exploit published7 No public exploit22 199812 Not applicable12 High7 Medium5 not blocked12 Exploited1 Working exploit published4 No public exploit7 199918 Not applicable18 Critical1 High9 Medium8 not blocked18 Working exploit published1 No public exploit17 200036 Not applicable36 High14 Medium21 Low1 not blocked36 Working exploit published14 No public exploit22 200148 No exploit published1 Not applicable47 Critical2 High24 Medium12 Low10 not blocked48 Exploited1 Working exploit published7 No public exploit40 200257 Outside Waratek scope1 Not applicable56 High28 Medium23 Low6 not blocked57 Working exploit published9 No public exploit48 200341 Not applicable41 High28 Medium12 Low1 not blocked41 Exploited3 Working exploit published13 No public exploit25 200429 Outside Waratek scope1 Not applicable28 High13 Medium14 Low2 not blocked29 Working exploit published3 No public exploit26 200533 Outside Waratek scope1 Not applicable32 Critical1 High19 Medium8 Low5 not blocked33 Exploited1 Working exploit published5 Forecast only1 No public exploit26 200639 Not applicable39 High17 Medium19 Low3 not blocked39 Working exploit published4 No public exploit35 200766 Not applicable66 High35 Medium27 Low4 not blocked66 Working exploit published21 No public exploit45 200868 Not applicable68 High43 Medium22 Low3 not blocked68 Working exploit published13 No public exploit55 200978 Not applicable78 High57 Medium21 not blocked78 Working exploit published17 No public exploit61 2010120 Not applicable120 High44 Medium74 Low2 not blocked120 Working exploit published18 No public exploit102 2011143 Not applicable143 High77 Medium61 Low5 not blocked143 Working exploit published15 No public exploit128 201285 Not applicable85 Critical1 High45 Medium33 Low6 not blocked85 Exploited1 Working exploit published12 Forecast only1 No public exploit71 2013143 No exploit published1 Not applicable142 Critical1 High79 Medium52 Low11 not blocked143 Exploited2 Working exploit published17 Forecast only9 No public exploit115 2014103 Outside Waratek scope7 Not applicable96 High56 Medium40 Low7 not blocked103 Exploited2 Working exploit published7 No public exploit94 2015108 Outside Waratek scope1 Not applicable107 Critical1 High51 Medium52 Low4 not blocked108 Exploited3 Working exploit published3 Proof of concept only1 No public exploit101 2016112 No exploit published2 Outside Waratek scope4 Not applicable106 Critical30 High58 Medium22 Low2 not blocked112 Exploited3 Working exploit published3 Forecast only5 No public exploit101 201732 Protected by Waratek2 Not applicable30 Critical10 High8 Medium14 blocked by ARMR today2 not blocked30 Exploited1 Forecast only1 No public exploit30 2018309 Protected by Waratek24 No exploit published3 Outside Waratek scope13 Not applicable269 Critical60 High143 Medium100 Low6 blocked by ARMR today24 not blocked285 Exploited3 Working exploit published15 Forecast only1 No public exploit290 2019184 Protected by Waratek9 Outside Waratek scope5 Not applicable170 Critical26 High114 Medium37 Low7 blocked by ARMR today9 not blocked175 Exploited1 Working exploit published3 Forecast only4 No public exploit176 2020112 Outside Waratek scope1 Not applicable111 Critical51 High41 Medium18 Low2 not blocked112 Exploited1 Working exploit published3 Proof of concept only2 No public exploit106 202135 Not applicable35 Critical8 High10 Medium17 not blocked35 Exploited1 Working exploit published1 No public exploit33 202260 Not applicable60 Critical10 High35 Medium15 not blocked60 No public exploit60 2023112 Not applicable112 Critical27 High69 Medium15 Low1 not blocked112 Proof of concept only1 No public exploit111 202455 Not applicable55 Critical15 High21 Medium19 not blocked55 Proof of concept only1 No public exploit54 202532 Not applicable32 Critical1 High7 Medium22 Low2 not blocked32 No public exploit32 202616 Not applicable16 Critical3 High5 Medium8 not blocked16 No public exploit16
1990199319961999200220052008201120142017202020232026
2,346 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 24 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2022-48311 Critical 2023-02-06 Not applicable Proof of concept only **UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B allows authenticated attacker to inject their own script into the page via HTTP configuration page. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2022-3990 High 2023-02-01 Not applicable No public exploit HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customers who opted for automatic updates should have already received the remediation.
CVE-2022-27538 High 2023-02-01 Not applicable No public exploit A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
CVE-2022-27537 High 2023-02-01 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities.
CVE-2022-23455 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
CVE-2022-23454 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
CVE-2022-23453 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
CVE-2021-3809 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.
CVE-2021-3808 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.
CVE-2021-3439 High 2023-02-01 Not applicable No public exploit HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.
CVE-2022-46359 High 2023-01-30 Not applicable No public exploit Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
CVE-2022-46358 High 2023-01-30 Not applicable No public exploit Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
CVE-2022-46357 High 2023-01-30 Not applicable No public exploit Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
CVE-2022-46356 High 2023-01-30 Not applicable No public exploit Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
CVE-2022-37934 High 2023-01-05 Not applicable No public exploit A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.
CVE-2022-43780 High 2022-12-12 Not applicable No public exploit Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.
CVE-2022-38395 High 2022-12-12 Not applicable No public exploit HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.
CVE-2022-37018 High 2022-12-12 Not applicable No public exploit A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
CVE-2022-2794 High 2022-12-12 Not applicable No public exploit Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack.
CVE-2022-1038 High 2022-12-12 Not applicable No public exploit A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software.
CVE-2021-46846 Medium 2022-12-12 Not applicable No public exploit Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.
CVE-2021-3942 Critical 2022-12-12 Not applicable No public exploit Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.
CVE-2021-3919 Critical 2022-12-12 Not applicable No public exploit A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escalation of privilege and/or denial of service. HP has released software updates to mitigate the potential vulnerability.
CVE-2021-3821 Critical 2022-12-12 Not applicable No public exploit A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
CVE-2021-3661 High 2022-12-12 Not applicable No public exploit A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.
CVE-2021-3437 Critical 2022-12-12 Not applicable No public exploit Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.
CVE-2022-37931 High 2022-11-22 Not applicable No public exploit A vulnerability in NetBatch-Plus software allows unauthorized access to the application.  HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details.
CVE-2022-28722 Critical 2022-09-26 Not applicable No public exploit Certain HP Print Products are potentially vulnerable to Buffer Overflow.
CVE-2022-28721 Critical 2022-09-26 Not applicable No public exploit Certain HP Print Products are potentially vulnerable to Remote Code Execution.
CVE-2022-1602 Medium 2022-09-13 Not applicable No public exploit A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service Pack 10 (SP10) to remediate the potential vulnerability introduced in SP8.
CVE-2022-23678 Medium 2022-09-06 Not applicable No public exploit A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system versions: 4.3.0 build 2208101 and below. Aruba has released upgrades for Virtual Intranet Access (VIA) Client that address this security vulnerability.
CVE-2022-28625 Medium 2022-08-31 Not applicable No public exploit A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-28617 Critical 2022-05-17 Not applicable No public exploit A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-28616 Critical 2022-05-17 Not applicable No public exploit A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23706 Medium 2022-05-17 Not applicable No public exploit A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23704 High 2022-05-09 Not applicable No public exploit A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.
CVE-2022-27239 High 2022-04-27 Not applicable No public exploit In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVE-2022-23700 Medium 2022-04-04 Not applicable No public exploit A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23699 High 2022-04-04 Not applicable No public exploit A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23698 High 2022-04-04 Not applicable No public exploit A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23697 Medium 2022-04-04 Not applicable No public exploit A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-24293 Critical 2022-03-23 Not applicable No public exploit Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVE-2022-24292 Critical 2022-03-23 Not applicable No public exploit Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVE-2022-24291 High 2022-03-23 Not applicable No public exploit Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVE-2022-23934 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23933 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23932 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23931 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23930 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23929 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23928 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23927 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23926 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23925 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23924 High 2022-03-11 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23958 Medium 2022-03-02 Not applicable No public exploit Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23957 Medium 2022-03-02 Not applicable No public exploit Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23956 Medium 2022-03-02 Not applicable No public exploit Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23955 Medium 2022-03-02 Not applicable No public exploit Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23954 Medium 2022-03-02 Not applicable No public exploit Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23953 Medium 2022-03-02 Not applicable No public exploit Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2021-29220 High 2022-02-24 Not applicable No public exploit Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilities could be exploited by a highly privileged user to remotely execute code that could lead to a loss of confidentiality, integrity, and availability. HPE has provided a software update to resolve this vulnerability in HPE iLO Amplifier Pack.
CVE-2021-39301 High 2022-02-16 Not applicable No public exploit Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVE-2021-39300 High 2022-02-16 Not applicable No public exploit Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVE-2021-39299 High 2022-02-16 Not applicable No public exploit Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVE-2021-39298 High 2022-02-16 Not applicable No public exploit A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
CVE-2021-39297 High 2022-02-16 Not applicable No public exploit Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVE-2020-6922 High 2022-02-16 Not applicable No public exploit Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6921 High 2022-02-16 Not applicable No public exploit Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6920 Medium 2022-02-16 Not applicable No public exploit Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6919 High 2022-02-16 Not applicable No public exploit Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6918 High 2022-02-16 Not applicable No public exploit Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6917 High 2022-02-16 Not applicable No public exploit Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2022-23456 Medium 2022-01-28 Not applicable No public exploit Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.
CVE-2021-3965 High 2022-01-14 Not applicable No public exploit Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
CVE-2021-29214 High 2021-12-10 Not applicable No public exploit A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.
CVE-2020-28419 High 2021-11-09 Not applicable No public exploit During installation with certain driver software or application packages an arbitrary code execution could occur.
CVE-2019-18916 High 2021-11-09 Not applicable No public exploit A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client.
CVE-2019-18914 Medium 2021-11-09 Not applicable No public exploit A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.
CVE-2019-18912 High 2021-11-09 Not applicable No public exploit A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution.
CVE-2019-16240 Critical 2021-11-09 Not applicable No public exploit A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
CVE-2021-39238 Critical 2021-11-03 Not applicable No public exploit Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
CVE-2021-39237 Medium 2021-11-03 Not applicable No public exploit Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.
CVE-2020-6931 High 2021-11-03 Not applicable No public exploit HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.
CVE-2020-28416 High 2021-11-03 Not applicable No public exploit HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer software installations that could potentially allow unauthorized local code execution.
CVE-2021-3705 Critical 2021-11-01 Not applicable No public exploit Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset the device.
CVE-2021-3704 High 2021-11-01 Not applicable No public exploit Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device.
CVE-2021-3440 High 2021-11-01 Not applicable No public exploit HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege.
CVE-2021-29212 Critical 2021-11-01 Not applicable No public exploit A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.
CVE-2021-3662 Medium 2021-10-29 Not applicable No public exploit Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
CVE-2021-3441 Medium 2021-10-29 Not applicable Working exploit published A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS).
CVE-2021-26586 High 2021-08-05 Not applicable No public exploit A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to disclose sensitive information. HPE has made software updates available to resolve the vulnerability in the HPE Edgeline Infrastructure Manager (EIM).
CVE-2021-26584 Medium 2021-06-03 Not applicable No public exploit A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).
CVE-2021-29211 Medium 2021-05-25 Not applicable No public exploit A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVE-2021-29210 Medium 2021-05-25 Not applicable No public exploit A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVE-2021-29209 Medium 2021-05-25 Not applicable No public exploit A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVE-2021-29208 Medium 2021-05-25 Not applicable No public exploit A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVE-2021-29207 Medium 2021-05-25 Not applicable No public exploit A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVE-2021-29206 Medium 2021-05-25 Not applicable No public exploit A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVE-2021-29205 Medium 2021-05-25 Not applicable No public exploit A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
‹ prev page 3 of 24 next ›