HP Futuresmart 4 vulnerabilities

9 CVEs affecting HP Futuresmart 4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-26508, published 2025-02-14.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-39238, published 2021-11-03. Critical severity, CVSS 9.8. EPSS: 11.2% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
• CVE-2019-6334, published 2019-10-16. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code.
• CVE-2021-39237, published 2021-11-03. Medium severity, CVSS 4.6. EPSS: 2.2% chance of exploitation in the next 30 days. Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.
• CVE-2025-26508, published 2025-02-14. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print…
• CVE-2025-26507, published 2025-02-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print…
• CVE-2019-18914, published 2021-11-09. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party…
• CVE-2021-3662, published 2021-10-29. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
• CVE-2024-0407, published 2024-02-21. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions…
• CVE-2019-18912, published 2021-11-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the…