CVE-2019-6324

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 17, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-63258.8HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 201 CVE-2019-63267.2HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 201 CVE-2019-63279.8HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 201 CVE-2019-63287.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63297.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63309.8A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability CVE-2019-63313.3An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caused by incomplete obf CVE-2019-63324.8A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-CVE-2019-63336.7A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vu CVE-2019-63349.8HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow pot CVE-2019-63357.5A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to cre CVE-2019-63375.2For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the