« Volver al listado

CVE-2021-3662

Estado: ModificadaMedia (5.4)—

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

HP — Futuresmart 4HP — Futuresmart 5

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-3662",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender",
          "versions": [
            {
              "status": "affected",
              "version": "before 4.11.2.1"
            },
            {
              "status": "affected",
              "version": "before 5.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-10-29T12:15:07.710",
  "references": [
    {
      "url": "https://support.hp.com/us-en/document/ish_4577473-4577502-16/hpsbpi03744",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://support.hp.com/us-en/document/ish_4577473-4577502-16/hpsbpi03744",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS)."
    },
    {
      "lang": "es",
      "value": "Determinadas impresoras multifunción HP Enterprise LaserJet y PageWide pueden ser vulnerables a un ataque de tipo cross-site scripting (XSS) almacenado"
    }
  ],
  "lastModified": "2026-06-17T04:05:31.653",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:futuresmart_4:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5B29112-4F11-4D38-B635-3CAF021AD3C5",
              "versionEndExcluding": "4.11.2.1"
            },
            {
              "criteria": "cpe:2.3:o:hp:futuresmart_5:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D57D4FE-A12E-42B6-8E10-D7B5E60675DF",
              "versionEndExcluding": "5.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}