« Volver al listado

CVE-2011-1533

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1533",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-04-15T00:55:01.897",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=130262523515904&w=2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://secunia.com/advisories/44143",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8203",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/47319",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1025315",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0931",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66683",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=130262523515904&w=2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/44143",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/8203",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/47319",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1025315",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0931",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66683",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en impresoras HP Photosmart D110 y B110, Photosmart Premium C310, Fax All-in-One, y C510; y ENVY 100 D410 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:29:34.223",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:envy_100_d410:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71C01EE7-6A61-48F4-A588-4DE78EB4E058"
            },
            {
              "criteria": "cpe:2.3:h:hp:photosmart_b110:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98A3FB0C-635A-43A0-B139-25E9FDE1AA13"
            },
            {
              "criteria": "cpe:2.3:h:hp:photosmart_d110:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C3D66F1-77A3-47D8-A943-1A477555EAB9"
            },
            {
              "criteria": "cpe:2.3:h:hp:photosmart_plus_b210:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FC770B6-2F5C-4BDF-B199-8F0410456D76"
            },
            {
              "criteria": "cpe:2.3:h:hp:photosmart_premium_c310:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF1F6507-88F3-4584-A132-CEEAF8C03A54"
            },
            {
              "criteria": "cpe:2.3:h:hp:photosmart_premium_c510:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E14A4BF-F10A-4F55-8017-D91B7B1E83F0"
            },
            {
              "criteria": "cpe:2.3:h:hp:photosmart_premium_fax_all-in-one:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CABF3FB5-AB3B-4997-91B3-BC1E80EDDFB4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}