CVE-2019-18914
Vulnérabilité non évaluée dans HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers
CVSS 0.0 · Non évaluée
EPSS 0.7%
HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers•Versions : ..., before FS3: 2309025_582092, before FS3: 2309025_582104, before FS3: 2309025_582097, before FS3: 2309025_582099, before FS3: 2309025_582101, before FS4: 2410028_055006, before FS3: 2309025_582114, before FS3: 2309025_582086, before FS4: 2410028_055005, before FS3: 2309025_582093, before FS3: 2309025_582102, before FS3: 2309025_582087, before FS3: 2309025_582096, before FS4: 2410028_055008, before FS4: 2410028_055007, before FS3: 2309025_582106, before FS3: 2309025_582081, before FS3: 2309025_582112, before FS3: 2309025_582084, before FS3: 2309025_582089, before FS4: 2410028_055002, before FS3: 2309025_582091, before FS3: 2309025_582105, before FS3: 2309025_582085, before FS3: 2309025_582083, before FS3: 2309025_582103, before FS3: 2309025_582110, before FS3: 2309025_582108, before FS3: 2309025_582088, before FS3: 2309025_582113, before FS4: 2410028_055003, before FS3: 2309025_582082, before FS4: 2410028_055004, before FS3: 2309025_582098
Description
A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.
Gravité et risque d'exploitation
CVE-2019-18914 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.67 %, ce qui la place devant 51.0 % des CVE référencées.
Que faire ?
- Vérifiez si HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers (versions ..., before FS3: 2309025_582092, before FS3: 2309025_582104, before FS3: 2309025_582097, before FS3: 2309025_582099, before FS3: 2309025_582101, before FS4: 2410028_055006, before FS3: 2309025_582114, before FS3: 2309025_582086, before FS4: 2410028_055005, before FS3: 2309025_582093, before FS3: 2309025_582102, before FS3: 2309025_582087, before FS3: 2309025_582096, before FS4: 2410028_055008, before FS4: 2410028_055007, before FS3: 2309025_582106, before FS3: 2309025_582081, before FS3: 2309025_582112, before FS3: 2309025_582084, before FS3: 2309025_582089, before FS4: 2410028_055002, before FS3: 2309025_582091, before FS3: 2309025_582105, before FS3: 2309025_582085, before FS3: 2309025_582083, before FS3: 2309025_582103, before FS3: 2309025_582110, before FS3: 2309025_582108, before FS3: 2309025_582088, before FS3: 2309025_582113, before FS4: 2410028_055003, before FS3: 2309025_582082, before FS4: 2410028_055004, before FS3: 2309025_582098) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.