cbcvebase.

Hp Web Jetadmin vulnerabilities

6 known vulnerabilities affecting hp/web_jetadmin.

Total CVEs
6
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM3LOW1

Vulnerabilities

Page 1 of 1
CVE-2004-1856P3MEDIUMCVSS 5.0PoCv7.5.25462004-03-24
CVE-2004-1856 [MEDIUM] CVE-2004-1856: devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows re devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
nvd
CVE-2004-1857P3LOWCVSS 2.1PoCv7.5.25462004-03-24
CVE-2004-1857 [LOW] CVE-2004-1857: Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authentic Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.
nvd
CVE-2009-4182P3CRITICALCVSS 9.0v10.22010-01-14
CVE-2009-4182 [CRITICAL] CVE-2009-4182: Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allo Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possibly by leveraging authentication and encryption weaknesses on the SQL server.
nvd
CVE-2017-2742P3HIGHCVSS 7.5≤ 10.4v10.42018-01-23
CVE-2017-2742 [HIGH] CVE-2017-2742: A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vu A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service.
nvd
CVE-2012-2011P4MEDIUMCVSS 4.3v8.0v8.12012-06-13
CVE-2012-2011 [MEDIUM] CWE-79 CVE-2012-2011: Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2011-0278P4MEDIUMCVSS 4.3v10.22011-03-01
CVE-2011-0278 [MEDIUM] CVE-2011-0278: Unspecified vulnerability in HP Web Jetadmin 10.2 Service Release 3 and 4 allows local users to bypa Unspecified vulnerability in HP Web Jetadmin 10.2 Service Release 3 and 4 allows local users to bypass intended access restrictions via unknown vectors.
nvd
Hp Web Jetadmin vulnerabilities | cvebase