Hp: Security Vulnerabilities
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-10-28
A GUI dialog of an application allows to view what files are in the file system without proper authorization.
CVSS Score
5.1
EPSS Score
0.003
Published
2025-10-28
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
CVSS Score
5.8
EPSS Score
0.001
Published
2025-10-01
A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted.
CVSS Score
7.3
EPSS Score
0.003
Published
2025-09-09
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.
CVSS Score
5.3
EPSS Score
0.003
Published
2025-08-14
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.
CVSS Score
6.9
EPSS Score
0.003
Published
2025-07-30
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).
CVSS Score
5.9
EPSS Score
0.002
Published
2025-07-28
Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensitive print job information.
CVSS Score
6.0
EPSS Score
0.009
Published
2025-07-25
A potential security
vulnerability has been identified in the Poly Clariti Manager for versions
prior to 10.12.2. The vulnerability could potentially allow a privileged
user to retrieve credentials from the log files. HP has addressed the issue in
the latest software update.
CVSS Score
5.7
EPSS Score
0.002
Published
2025-07-23
A potential stored cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website allows user input to be stored and rendered without proper
sanitization. HP has addressed the issue in the latest software update.
CVSS Score
5.7
EPSS Score
0.002
Published
2025-07-23