MEDIUM🇵🇱 Wersja polska

CVE-2009-2684

CVSS 4.3v2.0pub. 2009-10-13upd. 2026-04-23

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

  • HP Cm8050 Mfp

    HW
    Hp
    all versions

  • HP Cm8060 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet 3000n

    HW
    Hp
    all versions

  • HP Color Laserjet 3600n

    HW
    Hp
    all versions

  • HP Color Laserjet 3800n

    HW
    Hp
    all versions

  • HP Color Laserjet 4700n

    HW
    Hp
    all versions

  • HP Color Laserjet 4730 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet 6040 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet Cm4730 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet Cp3505

    HW
    Hp
    all versions

  • HP Color Laserjet Cp4005n

    HW
    Hp
    all versions

  • HP Color Laserjet Cp6015

    HW
    Hp
    all versions

  • HP Ds 9200c

    HW
    Hp
    all versions

  • HP Ds 9250c

    HW
    Hp
    all versions

  • HP Laserjet 2410

    HW
    Hp
    all versions

  • HP Laserjet 2420

    HW
    Hp
    all versions

  • HP Laserjet 2430n

    HW
    Hp
    all versions

  • HP Laserjet 4240

    HW
    Hp
    all versions

  • HP Laserjet 4250n

    HW
    Hp
    all versions

  • HP Laserjet 4345 Mfp

    HW
    Hp
    all versions

  • HP Laserjet 4350n

    HW
    Hp
    all versions

  • HP Laserjet 5200n

    HW
    Hp
    all versions

  • HP Laserjet 9040 Mfp

    HW
    Hp
    all versions

  • HP Laserjet 9040n

    HW
    Hp
    all versions

  • HP Laserjet 9050 Mfp

    HW
    Hp
    all versions

  • HP Laserjet 9050n

    HW
    Hp
    all versions

  • HP Laserjet M3027 Mfp

    HW
    Hp
    all versions

  • HP Laserjet M3035 Mfp

    HW
    Hp
    all versions

  • HP Laserjet M4345x Mfp

    HW
    Hp
    all versions

  • HP Laserjet M5025 Mfp

    HW
    Hp
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2011-4161HIGH10.0same product

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMx...

CVE-2009-0941HIGH7.6same product

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no manage...

CVE-2008-4419HIGH7.8same product

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embed...

CVE-2012-5221MEDIUM5.0same product

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, ...

CVE-2012-3272MEDIUM4.3same product

Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color ...