Vulnerabilities > HP > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-13 CVE-2023-5409 Unspecified vulnerability in HP products
HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs.
low complexity
hp
6.8
2023-10-04 CVE-2023-5113 Cross-site Scripting vulnerability in HP Futuresmart 5 5.3
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI.
network
low complexity
hp CWE-79
6.1
2023-09-05 CVE-2015-1390 Cross-site Scripting vulnerability in HP Airwave
Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
network
low complexity
hp CWE-79
6.1
2023-06-16 CVE-2023-30903 Unspecified vulnerability in HP Hp-Ux
HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.
local
low complexity
hp
5.5
2023-05-08 CVE-2023-22791 A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN.
high complexity
arubanetworks hp
4.8
2023-05-01 CVE-2023-28092 Unspecified vulnerability in HP products
A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server.
low complexity
hp
6.8
2023-04-28 CVE-2023-1526 Unspecified vulnerability in HP products
Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.
low complexity
hp
4.6
2023-04-28 CVE-2022-31643 Unspecified vulnerability in HP products
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity.
local
low complexity
hp
5.5
2023-04-25 CVE-2023-28084 Insufficiently Protected Credentials vulnerability in multiple products
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
local
low complexity
hpe hp CWE-522
5.5
2023-04-25 CVE-2023-28086 Unspecified vulnerability in HP Oneview
An HPE OneView appliance dump may expose proxy credential settings
local
low complexity
hp
5.5