HP Envy 5000 z4a74a Firmware vulnerabilities

2 CVEs affecting HP Envy 5000 z4a74a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18917, published 2020-03-16.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18917, published 2020-03-16. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.
• CVE-2019-6332, published 2020-01-09. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting (XSS). Affected products and versions…