CVE-2009-2684
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.
Published:Oct 13, 2009
Last Modified:Apr 23, 2026
EPS:Oct 13, 2009
EPSS Score:0.06501
CVSS Score:4.3
Affected Products
Vendor
Product
Action
Vendor
Hp
Product
Cm8050 Mfp
Hp
Cm8050 Mfp
Vendor
Hp
Product
Cm8060 Mfp
Hp
Cm8060 Mfp
Vendor
Hp
Product
Color Laserjet 3000n
Hp
Color Laserjet 3000n
Vendor
Hp
Product
Color Laserjet 3600n
Hp
Color Laserjet 3600n
Vendor
Hp
Product
Color Laserjet 3800n
Hp
Color Laserjet 3800n
Vendor
Hp
Product
Color Laserjet 4700n
Hp
Color Laserjet 4700n
Vendor
Hp
Product
Color Laserjet 4730 Mfp
Hp
Color Laserjet 4730 Mfp
Vendor
Hp
Product
Color Laserjet 6040 Mfp
Hp
Color Laserjet 6040 Mfp
Vendor
Hp
Product
Color Laserjet Cm4730 Mfp
Hp
Color Laserjet Cm4730 Mfp
Vendor
Hp
Product
Color Laserjet Cp3505
Hp
Color Laserjet Cp3505
Vendor
Hp
Product
Color Laserjet Cp4005n
Hp
Color Laserjet Cp4005n
Vendor
Hp
Product
Color Laserjet Cp6015
Hp
Color Laserjet Cp6015
Vendor
Hp
Product
Ds 9200c
Hp
Ds 9200c
Vendor
Hp
Product
Ds 9250c
Hp
Ds 9250c
Vendor
Hp
Product
Laserjet 2410
Hp
Laserjet 2410
Vendor
Hp
Product
Laserjet 2420
Hp
Laserjet 2420
Vendor
Hp
Product
Laserjet 2430n
Hp
Laserjet 2430n
Vendor
Hp
Product
Laserjet 4240
Hp
Laserjet 4240
Vendor
Hp
Product
Laserjet 4250n
Hp
Laserjet 4250n
Vendor
Hp
Product
Laserjet 4345 Mfp
Hp
Laserjet 4345 Mfp
Vendor
Hp
Product
Laserjet 4350n
Hp
Laserjet 4350n
Vendor
Hp
Product
Laserjet 5200n
Hp
Laserjet 5200n
Vendor
Hp
Product
Laserjet 9040 Mfp
Hp
Laserjet 9040 Mfp
Vendor
Hp
Product
Laserjet 9040n
Hp
Laserjet 9040n
Vendor
Hp
Product
Laserjet 9050 Mfp
Hp
Laserjet 9050 Mfp
Vendor
Hp
Product
Laserjet 9050n
Hp
Laserjet 9050n
Vendor
Hp
Product
Laserjet M3027 Mfp
Hp
Laserjet M3027 Mfp
Vendor
Hp
Product
Laserjet M3035 Mfp
Hp
Laserjet M3035 Mfp
Vendor
Hp
Product
Laserjet M4345x Mfp
Hp
Laserjet M4345x Mfp
Vendor
Hp
Product
Laserjet M5025 Mfp
Hp
Laserjet M5025 Mfp
Vendor
Hp
Product
Laserjet M9040 Mpf
Hp
Laserjet M9040 Mpf
Vendor
Hp
Product
Laserjet M9050 Mpf
Hp
Laserjet M9050 Mpf
Vendor
Hp
Product
Laserjet P3005n
Hp
Laserjet P3005n
Vendor
Hp
Product
Laserjet P4014
Hp
Laserjet P4014
Vendor
Hp
Product
Laserjet P4515
Hp
Laserjet P4515
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
