CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:hp:futuresmart_4:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:futuresmart_5:*:*:*:*:*:*:*:*

History

04 Nov 2021, 18:33

Type Values Removed Values Added
CPE cpe:2.3:o:hp:futuresmart_5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:futuresmart_4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:futuresmart_4:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:futuresmart_5:*:*:*:*:*:*:*:*

04 Nov 2021, 17:32

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 3.5
v3 : 5.4
CPE cpe:2.3:o:hp:futuresmart_5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:futuresmart_4_firmware:*:*:*:*:*:*:*:*
CWE CWE-79
References (MISC) https://support.hp.com/us-en/document/ish_4577473-4577502-16/hpsbpi03744 - (MISC) https://support.hp.com/us-en/document/ish_4577473-4577502-16/hpsbpi03744 - Vendor Advisory

29 Oct 2021, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-10-29 12:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-3662

Mitre link : CVE-2021-3662

CVE.ORG link : CVE-2021-3662


JSON object : View

Products Affected

hp

  • futuresmart_5
  • futuresmart_4
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')