← Database

CVE-2009-2684

MEDIUM CVSS: 4.3 Published: 2009-10-13 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.

Affected Platforms

Hp Cm8050 MfpHp Color Laserjet 4730 MfpHp Color Laserjet Cp3505Hp Color Laserjet Cm4730 MfpHp Color Laserjet Cp4005NHp Ds 9200CHp Color Laserjet 6040 MfpHp Laserjet 2420Hp Laserjet 9050 MfpHp Laserjet 4350N

Weakness Type

CWE-79

References