HP Inc. vulnerabilities, page 2
205 vulnerabilities
Known vulnerabilities in HP Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 261 products.
CVE-2025-26507hp, inc.certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers+3
EPSS score0.94%
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.CVE-2025-26506hp, inc.certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers+95EPSS score1.11%
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.CVE-2025-0858hp, inc.certain poly devicesEPSS score0.27%
A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure.CVE-2025-14432hp incpoly eagleeye cube+17EPSS score0.40%
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.CVE-2025-43485hp inc.poly clariti manager+1EPSS score0.20%
A potential security
vulnerability has been identified in the Poly Clariti Manager for versions
prior to 10.12.2. The vulnerability could potentially allow a privileged
user to retrieve credentials from the log files. HP has addressed the issue in
the latest software update.CVE-2025-43018hp inc.certain hp laserjet pro printers+17EPSS score0.31%
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.CVE-2025-43491hp, inc.poly lens+1EPSS score0.29%
A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted.CVE-2025-43489hp inc.poly clariti manager+1EPSS score0.28%
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validation. HP has addressed the issue in the latest software update.CVE-2025-43487hp inc.poly clariti manager+1EPSS score0.25%
A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly implement access controls. HP has addressed the issue in the latest software update.CVE-2025-43019hp inc.hp support assistant+1EPSS score0.13%
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion.CVE-2025-43490hp, inc.hp hotkey support softwareEPSS score0.17%
A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability.CVE-2025-43026hp inc.hp support assistant+1EPSS score0.13%
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.CVE-2025-43486hp inc.poly clariti manager+1EPSS score0.21%
A potential stored cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website allows user input to be stored and rendered without proper
sanitization. HP has addressed the issue in the latest software update.CVE-2025-43024hp incthinpro 8.1+1EPSS score0.28%
A GUI dialog of an application allows to view what files are in the file system without proper authorization.CVE-2025-43017hp inc.hp thinpro 8.1+1EPSS score0.27%
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.CVE-2025-43023ubuntuhplip+2EPSS score0.27%
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).CVE-2025-43020hp inc.poly clariti manager+1EPSS score0.29%
A potential command
injection vulnerability has been identified in the Poly Clariti Manager for
versions prior to 10.12.2. The vulnerability could allow a privileged user
to submit arbitrary input. HP has addressed the issue in the latest software update.CVE-2025-43484hp inc.poly clariti manager+1EPSS score0.21%
A potential reflected cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website does not validate or sanitize the user input before rendering it in the
response. HP has addressed the issue in the latest software update.CVE-2025-43488hp inc.poly clariti manager+1EPSS score0.22%
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS filter by submitting untrusted characters. HP has addressed the issue in the latest software update.CVE-2025-43483hp inc.poly clariti manager+1EPSS score0.17%
A potential security vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
vulnerability could allow the retrieval of hardcoded cryptographic keys. HP has
addressed the issue in the latest software update.