HP Futuresmart 5 vulnerabilities

9 CVEs affecting HP Futuresmart 5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-26508, published 2025-02-14.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-39238, published 2021-11-03. Critical severity, CVSS 9.8. EPSS: 11.2% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
• CVE-2021-39237, published 2021-11-03. Medium severity, CVSS 4.6. EPSS: 2.2% chance of exploitation in the next 30 days. Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.
• CVE-2025-26508, published 2025-02-14. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print…
• CVE-2025-26507, published 2025-02-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print…
• CVE-2021-3821, published 2022-12-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially…
• CVE-2023-1707, published 2023-06-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6.
• CVE-2021-3662, published 2021-10-29. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
• CVE-2023-5113, published 2023-10-04. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI.
• CVE-2024-0407, published 2024-02-21. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions…