CVE-2009-2684
Summary
| CVE | CVE-2009-2684 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-10-13 10:30:00 UTC |
| Updated | 2018-10-10 19:41:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Hp | Cm8050 Mfp | All | All | All | All |
| Hardware | Hp | Cm8050 Mfp | All | All | All | All |
| Hardware | Hp | Cm8060 Mfp | All | All | All | All |
| Hardware | Hp | Cm8060 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet 3000n | All | All | All | All |
| Hardware | Hp | Color Laserjet 3000n | All | All | All | All |
| Hardware | Hp | Color Laserjet 3600n | All | All | All | All |
| Hardware | Hp | Color Laserjet 3600n | All | All | All | All |
| Hardware | Hp | Color Laserjet 3800n | All | All | All | All |
| Hardware | Hp | Color Laserjet 3800n | All | All | All | All |
| Hardware | Hp | Color Laserjet 4700n | All | All | All | All |
| Hardware | Hp | Color Laserjet 4700n | All | All | All | All |
| Hardware | Hp | Color Laserjet 4730 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet 4730 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet 6040 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet 6040 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet Cm4730 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet Cm4730 Mfp | All | All | All | All |
| Hardware | Hp | Color Laserjet Cp3505 | All | All | All | All |
| Hardware | Hp | Color Laserjet Cp3505 | All | All | All | All |
| Hardware | Hp | Color Laserjet Cp4005n | All | All | All | All |
| Hardware | Hp | Color Laserjet Cp4005n | All | All | All | All |
| Hardware | Hp | Color Laserjet Cp6015 | All | All | All | All |
| Hardware | Hp | Color Laserjet Cp6015 | All | All | All | All |
| Hardware | Hp | Ds 9200c | All | All | All | All |
| Hardware | Hp | Ds 9200c | All | All | All | All |
| Hardware | Hp | Ds 9250c | All | All | All | All |
| Hardware | Hp | Ds 9250c | All | All | All | All |
| Hardware | Hp | Laserjet 2410 | All | All | All | All |
| Hardware | Hp | Laserjet 2410 | All | All | All | All |
| Hardware | Hp | Laserjet 2420 | All | All | All | All |
| Hardware | Hp | Laserjet 2420 | All | All | All | All |
| Hardware | Hp | Laserjet 2430n | All | All | All | All |
| Hardware | Hp | Laserjet 2430n | All | All | All | All |
| Hardware | Hp | Laserjet 4240 | All | All | All | All |
| Hardware | Hp | Laserjet 4240 | All | All | All | All |
| Hardware | Hp | Laserjet 4250n | All | All | All | All |
| Hardware | Hp | Laserjet 4250n | All | All | All | All |
| Hardware | Hp | Laserjet 4345 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet 4345 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet 4350n | All | All | All | All |
| Hardware | Hp | Laserjet 4350n | All | All | All | All |
| Hardware | Hp | Laserjet 5200n | All | All | All | All |
| Hardware | Hp | Laserjet 5200n | All | All | All | All |
| Hardware | Hp | Laserjet 9040n | All | All | All | All |
| Hardware | Hp | Laserjet 9040n | All | All | All | All |
| Hardware | Hp | Laserjet 9040 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet 9040 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet 9050n | All | All | All | All |
| Hardware | Hp | Laserjet 9050n | All | All | All | All |
| Hardware | Hp | Laserjet 9050 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet 9050 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M3027 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M3027 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M3035 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M3035 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M4345x Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M4345x Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M5025 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M5025 Mfp | All | All | All | All |
| Hardware | Hp | Laserjet M9040 Mpf | All | All | All | All |
| Hardware | Hp | Laserjet M9040 Mpf | All | All | All | All |
| Hardware | Hp | Laserjet M9050 Mpf | All | All | All | All |
| Hardware | Hp | Laserjet M9050 Mpf | All | All | All | All |
| Hardware | Hp | Laserjet P3005n | All | All | All | All |
| Hardware | Hp | Laserjet P3005n | All | All | All | All |
| Hardware | Hp | Laserjet P4014 | All | All | All | All |
| Hardware | Hp | Laserjet P4014 | All | All | All | All |
| Hardware | Hp | Laserjet P4515 | All | All | All | All |
| Hardware | Hp | Laserjet P4515 | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| '[security bulletin] HPSBPI02463 SSRT090061 rev.1 - HP LaserJet Printers, HP Color LaserJet Printers,' - MARC | HP | marc.info | |
| Security Advisory SA36969 - HP LaserJet Printers / Digital Senders Cross-Site Scripting Vulnerabilities - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities | BID | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Vendor Advisory |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Digital Security Research Group - [DSECRG-09-048] HP LaserJet printers - Multiple Stored XSS (Script injection) vulnerabilities | MISC | dsecrg.com | Exploit |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.