A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site…

Description

A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.

Scores

EPSS (exploitation in 30 days)

0.67% · top 48% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.1.

Weakness

• Cross-Site Scripting
• CWE-79 (opens in a new tab)All about CWE-79 and its CVEs

Affected products

• HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers

  • affected before FS3: 2309025_582081
  • affected before FS3: 2309025_582082
  • affected before FS3: 2309025_582083
  • affected before FS3: 2309025_582084
  • affected before FS3: 2309025_582085
  • affected before FS3: 2309025_582086
  • affected before FS3: 2309025_582087
  • affected before FS3: 2309025_582088
  • affected before FS3: 2309025_582089
  • affected before FS3: 2309025_582091
  • affected before FS3: 2309025_582092
  • affected before FS3: 2309025_582093
  • affected before FS3: 2309025_582096
  • affected before FS3: 2309025_582097
  • affected before FS3: 2309025_582098
  • affected before FS3: 2309025_582099
  • affected before FS3: 2309025_582101
  • affected before FS3: 2309025_582102
  • affected before FS3: 2309025_582103
  • affected before FS3: 2309025_582104
  • affected before FS3: 2309025_582105
  • affected before FS3: 2309025_582106
  • affected before FS3: 2309025_582108
  • affected before FS3: 2309025_582110
  • affected before FS3: 2309025_582112
  • affected before FS3: 2309025_582113
  • affected before FS3: 2309025_582114
  • affected before FS4: 2410028_055002
  • affected before FS4: 2410028_055003
  • affected before FS4: 2410028_055004
  • affected before FS4: 2410028_055005
  • affected before FS4: 2410028_055006
  • affected before FS4: 2410028_055007
  • affected before FS4: 2410028_055008
  • affected ...

References (1)

• https://support.hp.com/us-en/document/c06546034 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-18914](https://trackcve.app/badge/CVE-2019-18914.svg)](https://trackcve.app/cve/CVE-2019-18914)

Record last updated 5 Aug 2024, 02:02 UTC.