CVE-2013-4845
Published Dec 14, 2013
Last updated 5 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- hp-security-alert@hp.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:officejet_pro_8500_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1418B11D-5C5F-4B03-A7F5-F8CA1FDD19C2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb022a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "729B83CB-31D9-440D-8157-90EC2DC3AD07"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb023a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C033AC80-8DA6-4A0E-BDFE-5EA3D8AE6C16"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb025a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "044A2167-F9F3-4122-AD72-2C73006F09A0"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb793a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C281F107-FD57-4F2A-8864-FDFF03AD64B8"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb794a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B07E1933-C736-41B8-8AE3-E4F89F8D6334"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb862a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E8E32A8-6122-482B-B6C8-1F009E740509"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cb874a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24E88E41-E3F9-49FA-9AA5-2271A35301F8"
},
{
"criteria": "cpe:2.3:h:hp:officejet_pro_8500:cn539a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96DBBCD7-B687-4190-B0DB-A2DAB93CD7F0"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]