HP Inc. vulnerabilities, page 5
205 vulnerabilities
Known vulnerabilities in HP Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 261 products.
CVE-2022-38395hp inc.hp support assistant+2
EPSS score2.78%
HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.CVE-2022-38396hp inc.hp factory preinstalled windows 10 20h2 images+10EPSS score0.41%
HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.CVE-2022-3990hp inc.hpsfviewer+1EPSS score0.17%
HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customers who opted for automatic updates should have already received the remediation.CVE-2022-23454hp inc.hp support assistant+1EPSS score0.19%
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.CVE-2022-23453hp inc.hp support assistant+1EPSS score0.19%
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.CVE-2022-23455hp inc.hp support assistant+1EPSS score0.19%
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.CVE-2017-2751hp inc.hp 240 g1 notebook pc and certain other consumer notebooks+34EPSS score1.06%
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.CVE-2017-2746hp inc.hp jetadvantage security manager+1EPSS score0.90%
Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to create a denial of service.CVE-2017-2743hp inc.hp enterprise laserjet printers and mfps; hp officejet enterprise color printers and mfp; hp pagewide color printers and mps+88EPSS score1.24%
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.CVE-2017-2744hp inc.hp support assistant+1EPSS score0.47%
The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1.CVE-2017-2745hp inc.hp jetadvantage security manager+1EPSS score0.90%
Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser.CVE-2017-2747hp inc.hp designjet printers; hp latex printers+22EPSS score1.82%
HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.CVE-2017-2740hp inc.hp thinpro+1EPSS score0.51%
A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device.CVE-2017-2742hp inc.hp web jetadmin+1EPSS score3.52%
A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service.CVE-2017-2741hp inc.hp pagewide printers; hp officejet pro printers+38EPSS score84.61%
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.CVE-2017-2750hp inc.hp laserjet enterprise printers, hp pagewide enterprise printers, hp laserjet managed printers, hp officejet enterprise printers+173EPSS score9.92%
Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions.CVE-2024-2301hp inc.certain hp laserjet pro devices+14EPSS score0.30%
Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device.CVE-2024-2300hp inc.hp advance mobile applicationEPSS score0.17%
HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices.CVE-2024-1174hp inc.hp thinpro 8.0EPSS score0.18%
Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.0 SP 8, which includes updates to mitigate potential vulnerabilities.CVE-2024-1869hp inc.hp designjet+2EPSS score2.33%
Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpose gateway (GGW) over port 9220.