CVEvulnerability

CVE-2012-3272

4.3 MEDIUM Published 2012-12-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• hp color laserjet cm3530 (<= 53.190.8) • hp color laserjet cm60xx (<= 53.190.8) • hp color laserjet cp3525 (<= 06.140.3.17) • hp color laserjet cp4xxx (<= 07.120.5) • hp color laserjet cp6015 (<= 04.160.2) • hp laserjet p3015 (<= 07.140.2) • hp laserjet p4xxx (<= 04.170.2)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References