MEDIUM🇵🇱 Wersja polska

CVE-2012-3272

CVSS 4.3v2.0pub. 2012-12-06upd. 2026-04-29

Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

  • HP Color Laserjet Cm3530

    HW
    Hp
    ≤ 53.190.8

  • HP Color Laserjet Cm60xx

    HW
    Hp
    ≤ 53.190.8

  • HP Color Laserjet Cp3525

    HW
    Hp
    ≤ 06.140.3.17

  • HP Color Laserjet Cp4xxx

    HW
    Hp
    ≤ 07.120.5

  • HP Color Laserjet Cp6015

    HW
    Hp
    ≤ 04.160.2

  • HP Laserjet P3015

    HW
    Hp
    ≤ 07.140.2

  • HP Laserjet P4xxx

    HW
    Hp
    ≤ 04.170.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2011-4785HIGH7.8ten sam produkt

Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmw...

CVE-2011-4161HIGH10.0ten sam produkt

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMx...

CVE-2012-5221MEDIUM5.0ten sam produkt

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, ...

CVE-2009-2684MEDIUM4.3ten sam produkt

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain ...

CVE-2017-5638CRITICAL9.8⚠ KEVten sam vendor

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect ex...