Skip to content

01 Record index

02 Records

01 Record

CVE-2009-2684

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

02 Description

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.23% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 81.2% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2009-10-13 10:00Z16 YR AGO

Last updated

2024-08-07 05:59Z2 YR AGO

Reserved

2009-08-05

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base

Data version

5.1

Document digest

9c1326e101dc78778d28e00e328120117e2d70e9d64fa2a55a7ffc7dbdd50224

05 Affected products

VendorProductVersionsPlatforms

hpcm8050_mfpNot specified—

hpcm8060_mfpNot specified—

hpcolor_laserjet_3000nNot specified—

hpcolor_laserjet_3600nNot specified—

hpcolor_laserjet_3800nNot specified—

hpcolor_laserjet_4700nNot specified—

hpcolor_laserjet_4730_mfpNot specified—

hpcolor_laserjet_6040_mfpNot specified—

hpcolor_laserjet_cm4730_mfpNot specified—

hpcolor_laserjet_cp3505Not specified—

hpcolor_laserjet_cp4005nNot specified—

hpcolor_laserjet_cp6015Not specified—

hpds_9200cNot specified—

hpds_9250cNot specified—

hplaserjet_2410Not specified—

hplaserjet_2420Not specified—

hplaserjet_2430nNot specified—

hplaserjet_4240Not specified—

hplaserjet_4250nNot specified—

hplaserjet_4345_mfpNot specified—

hplaserjet_4350nNot specified—

hplaserjet_5200nNot specified—

hplaserjet_9040_mfpNot specified—

hplaserjet_9040nNot specified—

hplaserjet_9050_mfpNot specified—

hplaserjet_9050nNot specified—

hplaserjet_m3027_mfpNot specified—

hplaserjet_m3035_mfpNot specified—

hplaserjet_m4345x_mfpNot specified—

hplaserjet_m5025_mfpNot specified—

hplaserjet_m9040_mpfNot specified—

hplaserjet_m9050_mpfNot specified—

hplaserjet_p3005nNot specified—

hplaserjet_p4014Not specified—

hplaserjet_p4515Not specified—

06 References

www.securityfocus.com36613http://www.securityfocus.com/bid/36613vdb-entryx_refsource_BID
dsecrg.comhttp://dsecrg.com/pages/vul/show.php?id=148x_refsource_MISC
www.vupen.comADV-2009-2850http://www.vupen.com/english/advisories/2009/2850vdb-entryx_refsource_VUPEN
secunia.com36969http://secunia.com/advisories/36969third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20091007 [DSECRG-09-048] HP LaserJet printers - Multiple Stored XSS vulnerabilitieshttp://www.securityfocus.com/archive/1/507038/100/0/threadedmailing-listx_refsource_BUGTRAQ
exchange.xforce.ibmcloud.comhp-laserjet-unspecified-xss(53677)https://exchange.xforce.ibmcloud.com/vulnerabilities/53677vdb-entryx_refsource_XF
marc.infoHPSBPI02463http://marc.info/?l=bugtraq&m=125493484205823&w=2vendor-advisoryx_refsource_HP