CVE Feed

    Dashboard / CVE / CVE-2024-2301

    CVE-2024-2301

    Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device.

    Published:May 23, 2024
    Last Modified:Jan 26, 2026
    EPS:May 23, 2024
    EPSS Score:0.00171
    CVSS Score:7.6

    Affected Products

    Vendor
    Hp
    Product
    Cz172a
    Vendor
    Hp
    Product
    Cz172a Firmware
    Vendor
    Hp
    Product
    Cz173a
    Vendor
    Hp
    Product
    Cz173a Firmware
    Vendor
    Hp
    Product
    Cz174a
    Vendor
    Hp
    Product
    Cz174a Firmware
    Vendor
    Hp
    Product
    Cz175a
    Vendor
    Hp
    Product
    Cz175a Firmware
    Vendor
    Hp
    Product
    Cz176a
    Vendor
    Hp
    Product
    Cz176a Firmware
    Vendor
    Hp
    Product
    Cz177a
    Vendor
    Hp
    Product
    Cz177a Firmware
    Vendor
    Hp
    Product
    Cz178a
    Vendor
    Hp
    Product
    Cz178a Firmware
    Vendor
    Hp
    Product
    Cz181a
    Vendor
    Hp
    Product
    Cz181a Firmware
    Vendor
    Hp
    Product
    Cz182a
    Vendor
    Hp
    Product
    Cz182a Firmware
    Vendor
    Hp
    Product
    Cz183a
    Vendor
    Hp
    Product
    Cz183a Firmware
    Vendor
    Hp
    Product
    Cz184a
    Vendor
    Hp
    Product
    Cz184a Firmware
    Vendor
    Hp
    Product
    Cz185a
    Vendor
    Hp
    Product
    Cz185a Firmware
    Vendor
    Hp
    Product
    Cz186a
    Vendor
    Hp
    Product
    Cz186a Firmware
    Vendor
    Hp
    Product
    Cz187a
    Vendor
    Hp
    Product
    Cz187a Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High