Browse CVEs

CRITICAL 9.8 CVE-2025-43017 HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate … Thinpro Mitigation only Fix from $2,3002025-10-28 HIGH 7.5 CVE-2025-43024 A GUI dialog of an application allows to view what files are in the file system without proper authorization. Thinpro Mitigation only Fix from $1,9502025-10-28 MEDIUM 6.5 CVE-2025-3508 Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensi… W3z72e Firmware Mitigation only Fix from $1,6002025-07-25 HIGH 7.8 CVE-2025-43019 A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbit… Support Assistant Mitigation only Fix from $1,9502025-07-08 CRITICAL 9.8 CVE-2024-7720 HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source li… Security Manager No fix yet Fix from $2,3002024-08-27 HIGH 7.8 CVE-2024-6147 Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on aff… Poly Plantronics Hub Mitigation only Fix from $1,9502024-06-20 HIGH 7.7 CVE-2024-28893 Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified … Softpaqs Mitigation only Fix from $1,9502024-05-01 HIGH 7.5 CVE-2024-1869 Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the gen… Cq893c Firmware Mitigation only Fix from $1,9502024-03-01 HIGH 7.5 CVE-2023-50271 A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or … System Management Homepage No fix yet Fix from $1,9502023-12-17 HIGH 7.8 CVE-2023-5671 HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the poten… Print And Scan Doctor Mitigation only Fix from $1,9502023-10-25 HIGH 7.3 CVE-2022-4894 Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. 2zn49a Firmware Mitigation only Fix from $1,9502023-08-16 CRITICAL 9.8 CVE-2023-1329 A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow an… Laserjet Managed Mfp E62665 3gy14a Firmware Mitigation only Fix from $2,3002023-06-14 HIGH 7.8 CVE-2022-31644 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation o… Dragonfly Folio G3 2 In 1 Firmware Mitigation only Fix from $1,9502023-06-14 HIGH 7.8 CVE-2022-31645 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation o… Dragonfly Folio G3 2 In 1 Firmware No fix yet Fix from $1,9502023-06-14 HIGH 7.8 CVE-2022-31646 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation o… Dragonfly Folio G3 2 In 1 Firmware No fix yet Fix from $1,9502023-06-14 CRITICAL 9.8 CVE-2023-26295 Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Hp Device Manager Mitigation only Fix from $2,3002023-06-12 HIGH 8.8 CVE-2023-26296 Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Hp Device Manager Mitigation only Fix from $1,9502023-06-12 HIGH 8.8 CVE-2023-26297 Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Hp Device Manager Mitigation only Fix from $1,9502023-06-12 HIGH 8.8 CVE-2023-26298 Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Hp Device Manager Mitigation only Fix from $1,9502023-06-12 HIGH 7.8 CVE-2023-26294 Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Hp Device Manager Mitigation only Fix from $1,9502023-06-12 HIGH 7.8 CVE-2019-16283 A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution. Softpaq Installer No fix yet Fix from $1,9502023-06-09 MEDIUM 6.8 CVE-2023-28092 A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnera… Integrated Lights Out Firmware No fix yet Fix from $1,6002023-05-01 MEDIUM 5.5 CVE-2022-31643 A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasi… Elite Dragonfly G3 Firmware Mitigation only Fix from $1,6002023-04-28 CRITICAL 9.0 CVE-2022-48311 **UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U… Deskjet 2540 A9u23b Firmware No fix yet Fix from $2,3002023-02-06 HIGH 7.8 CVE-2022-27537 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation o… Dragonfly Folio G3 2 In 1 Firmware No fix yet Fix from $1,9502023-02-01 HIGH 7.8 CVE-2021-3808 Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code exec… Elite Dragonfly Firmware Mitigation only Fix from $1,9502023-02-01 HIGH 7.8 CVE-2021-3809 Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code exec… Elite Dragonfly Firmware Mitigation only Fix from $1,9502023-02-01 HIGH 7.5 CVE-2022-37934 A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploit… Officeconnect 1820 24g Poe\+ \(185w\) Switch J9983a Firmware Mitigation only Fix from $1,9502023-01-05 HIGH 8.4 CVE-2021-3661 A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is… Z1 All In One G3 Firmware Mitigation only Fix from $1,9502022-12-12 HIGH 7.8 CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application.  HPE has provided a workaround and fix. Please refer to HPE… Nonstop Netbatch Plus Mitigation only Fix from $1,9502022-11-22