Stored XSS Vulnerability in HP Enterprise LaserJet and PageWide MFPs
CVE-2021-3662

5.4MEDIUM

Key Information:

Vendor
HP
Status
HP Enterprise Laserjet Mfp; HP Enterprise Pagewide Mfps; HP Digital Sender
Vendor
CVE Published:
29 October 2021

Summary

Certain HP Enterprise LaserJet and PageWide Multi-Functional Printers (MFPs) are susceptible to a stored cross-site scripting (XSS) vulnerability, which could allow an attacker to inject malicious scripts into user interactions. If exploited, this vulnerability may enable unauthorized actions or data exposure when users access compromised printer interfaces.

Affected Version(s)

HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender before 4.11.2.1

HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender before 5.3

References

https://support.hp.com/us-en/document/ish_4577473-4577502...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.