Stored XSS Vulnerability in HP Enterprise LaserJet and PageWide MFPs
CVE-2021-3662

5.4MEDIUM

Key Information:

Vendor

HP
Status
HP Enterprise Laserjet Mfp; HP Enterprise Pagewide Mfps; HP Digital Sender
Vendor
CVE Published:
29 October 2021

What is CVE-2021-3662?

Certain HP Enterprise LaserJet and PageWide Multi-Functional Printers (MFPs) are susceptible to a stored cross-site scripting (XSS) vulnerability, which could allow an attacker to inject malicious scripts into user interactions. If exploited, this vulnerability may enable unauthorized actions or data exposure when users access compromised printer interfaces.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender before 4.11.2.1

HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender before 5.3

References

https://support.hp.com/us-en/document/ish_4577473-4577502...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.