hp Vulnerability Advisory Catalog

Total 2,062 security vulnerabilities recorded for hp software and firmware.

← Back to All Vendors
Component: poly_clariti_manager

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabil...

๐Ÿ“… 2024-08-06
CVSS 6.1 Dossier →
CVE-2024-22442 CRITICAL
Component: 3par_service_processor_firmware

The vulnerability could be remotely exploited to bypass authentication....

๐Ÿ“… 2024-07-16
CVSS 9.8 Dossier →
Component: elitebook_745_g4_firmware

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbit...

๐Ÿ“… 2024-06-28
CVSS 7.8 Dossier →
Component: poly_plantronics_hub

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe...

๐Ÿ“… 2024-06-20
CVSS 7.8 Dossier →
Component: elite_slice_firmware

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code exec...

๐Ÿ“… 2024-06-10
CVSS 6.8 Dossier →
Component: elite_slice_firmware

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code executi...

๐Ÿ“… 2024-06-10
CVSS 6.8 Dossier →
CVE-2024-5143 MEDIUM
Component: w1a78a_firmware

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credential...

๐Ÿ“… 2024-05-23
CVSS 6.8 Dossier →
Component: cz181a_firmware

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device. ...

๐Ÿ“… 2024-05-23
CVSS 7.6 Dossier →
Component: poly_plantronics_hub

A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below....

๐Ÿ“… 2024-05-14
CVSS 6.7 Dossier →
Component: softpaqs

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified a...

๐Ÿ“… 2024-05-01
CVSS 7.7 Dossier →
Component: poly_ccx_350

A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process di...

๐Ÿ“… 2024-04-09
CVSS 8.8 Dossier →
CVE-2024-2209 MEDIUM
Component: 26k70b_firmware

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printerโ€™s Firmware Update U...

๐Ÿ“… 2024-03-27
CVSS 6.3 Dossier →
CVE-2023-4063 MEDIUM
Component: 1kr42a_firmware

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request....

๐Ÿ“… 2024-03-22
CVSS 5.3 Dossier →
Component: cq893c_firmware

Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the gene...

๐Ÿ“… 2024-03-01
CVSS 7.5 Dossier →
CVE-2024-0407 MEDIUM
Component: futuresmart_4

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the de...

๐Ÿ“… 2024-02-21
CVSS 6.5 Dossier →
Component: z440_workstation_firmware

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, a...

๐Ÿ“… 2024-02-14
CVSS 7.9 Dossier →
Component: elite_mini_600_g9_firmware

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detectio...

๐Ÿ“… 2024-02-14
CVSS 6.4 Dossier →
Component: elite_mini_600_g9_firmware

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detectio...

๐Ÿ“… 2024-02-14
CVSS 6.4 Dossier →
CVE-2023-6573 MEDIUM
Component: oneview

HPE OneView may have a missing passphrase during restore....

๐Ÿ“… 2024-01-23
CVSS 5.5 Dossier →
Component: oneview

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service....

๐Ÿ“… 2024-01-23
CVSS 7.5 Dossier →
Component: oneview

HPE OneView may allow command injection with local privilege escalation....

๐Ÿ“… 2024-01-23
CVSS 7.8 Dossier →
Component: system_management_homepage

A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or ...

๐Ÿ“… 2023-12-17
CVSS 7.2 Dossier →
Component: officejet_pro_8730_d9l19a_firmware

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that c...

๐Ÿ“… 2023-12-14
CVSS 7.5 Dossier →
Component: image_assistant

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege....

๐Ÿ“… 2023-10-31
CVSS 7.8 Dossier →
Page 3 of 86 (2,062 Total Records)