HP Web Jetadmin vulnerabilities

6 CVEs affecting HP Web Jetadmin, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2742, published 2018-01-23.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-1857, published 2004-03-24. Low severity, CVSS 2.1. EPSS: 86.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.
• CVE-2004-1856, published 2004-03-24. Medium severity, CVSS 5.0. EPSS: 29.5% chance of exploitation in the next 30 days. devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
• CVE-2017-2742, published 2018-01-23. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service.
• CVE-2009-4182, published 2010-01-14. High severity, CVSS 9.0. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possibly by leveraging…
• CVE-2012-2011, published 2012-06-13. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2011-0278, published 2011-03-01. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Web Jetadmin 10.2 Service Release 3 and 4 allows local users to bypass intended access restrictions via unknown vectors.