CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2684

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.041

EPSS Ranking 87.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2009-2684

Hp » Cm8050 Mfp » Version: Any

cpe:2.3:h:hp:cm8050_mfp:*
Hp » Cm8060 Mfp » Version: Any

cpe:2.3:h:hp:cm8060_mfp:*
Hp » Color Laserjet 3000n » Version: Any

cpe:2.3:h:hp:color_laserjet_3000n:*
Hp » Color Laserjet 3600n » Version: Any

cpe:2.3:h:hp:color_laserjet_3600n:*
Hp » Color Laserjet 3800n » Version: Any

cpe:2.3:h:hp:color_laserjet_3800n:*
Hp » Color Laserjet 4700n » Version: Any

cpe:2.3:h:hp:color_laserjet_4700n:*
Hp » Color Laserjet 4730 Mfp » Version: N/A

cpe:2.3:h:hp:color_laserjet_4730_mfp:-
Hp » Color Laserjet 4730 Mfp » Version: cb480a

cpe:2.3:h:hp:color_laserjet_4730_mfp:cb480a
Hp » Color Laserjet 6040 Mfp » Version: Any

cpe:2.3:h:hp:color_laserjet_6040_mfp:*
Hp » Color Laserjet Cm4730 Mfp » Version: Any

cpe:2.3:h:hp:color_laserjet_cm4730_mfp:*
Hp » Color Laserjet Cp3505 » Version: cb442a

cpe:2.3:h:hp:color_laserjet_cp3505:cb442a
Hp » Color Laserjet Cp4005n » Version: Any

cpe:2.3:h:hp:color_laserjet_cp4005n:*
Hp » Color Laserjet Cp6015 » Version: q3932a

cpe:2.3:h:hp:color_laserjet_cp6015:q3932a
Hp » Ds 9200c » Version: Any

cpe:2.3:h:hp:ds_9200c:*
Hp » Ds 9250c » Version: Any

cpe:2.3:h:hp:ds_9250c:*
Hp » Laserjet 2410 » Version: N/A

cpe:2.3:h:hp:laserjet_2410:-
Hp » Laserjet 2420 » Version: N/A

cpe:2.3:h:hp:laserjet_2420:-
Hp » Laserjet 2430n » Version: Any

cpe:2.3:h:hp:laserjet_2430n:*
Hp » Laserjet 4240 » Version: q7785a

cpe:2.3:h:hp:laserjet_4240:q7785a
Hp » Laserjet 4250n » Version: Any

cpe:2.3:h:hp:laserjet_4250n:*
Hp » Laserjet 4345 Mfp » Version: N/A

cpe:2.3:h:hp:laserjet_4345_mfp:-
Hp » Laserjet 4345 Mfp » Version: q3942a

cpe:2.3:h:hp:laserjet_4345_mfp:q3942a
Hp » Laserjet 4350n » Version: Any

cpe:2.3:h:hp:laserjet_4350n:*
Hp » Laserjet 5200n » Version: q7543a

cpe:2.3:h:hp:laserjet_5200n:q7543a
Hp » Laserjet 9040 Mfp » Version: N/A

cpe:2.3:h:hp:laserjet_9040_mfp:-
Hp » Laserjet 9040 Mfp » Version: q3721a

cpe:2.3:h:hp:laserjet_9040_mfp:q3721a
Hp » Laserjet 9040n » Version: Any

cpe:2.3:h:hp:laserjet_9040n:*
Hp » Laserjet 9050 Mfp » Version: N/A

cpe:2.3:h:hp:laserjet_9050_mfp:-
Hp » Laserjet 9050 Mfp » Version: q3721a

cpe:2.3:h:hp:laserjet_9050_mfp:q3721a
Hp » Laserjet 9050n » Version: Any

cpe:2.3:h:hp:laserjet_9050n:*
Hp » Laserjet M3027 Mfp » Version: N/A

cpe:2.3:h:hp:laserjet_m3027_mfp:-
Hp » Laserjet M3027 Mfp » Version: cb416a

cpe:2.3:h:hp:laserjet_m3027_mfp:cb416a
Hp » Laserjet M3035 Mfp » Version: N/A

cpe:2.3:h:hp:laserjet_m3035_mfp:-
Hp » Laserjet M3035 Mfp » Version: cb414a

cpe:2.3:h:hp:laserjet_m3035_mfp:cb414a
Hp » Laserjet M3035 Mfp » Version: cc519a

cpe:2.3:h:hp:laserjet_m3035_mfp:cc519a
Hp » Laserjet M4345x Mfp » Version: Any

cpe:2.3:h:hp:laserjet_m4345x_mfp:*
Hp » Laserjet M5025 Mfp » Version: N/A

cpe:2.3:h:hp:laserjet_m5025_mfp:-
Hp » Laserjet M5025 Mfp » Version: q7840a

cpe:2.3:h:hp:laserjet_m5025_mfp:q7840a
Hp » Laserjet M9040 Mpf » Version: cc394a

cpe:2.3:h:hp:laserjet_m9040_mpf:cc394a
Hp » Laserjet M9050 Mpf » Version: cc395a

cpe:2.3:h:hp:laserjet_m9050_mpf:cc395a
Hp » Laserjet P3005n » Version: Any

cpe:2.3:h:hp:laserjet_p3005n:*
Hp » Laserjet P4014 » Version: cb507a

cpe:2.3:h:hp:laserjet_p4014:cb507a
Hp » Laserjet P4515 » Version: cb514a

cpe:2.3:h:hp:laserjet_p4515:cb514a

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2684

Products

Pricing

Contact Us