CVE:CVE-2019-18914
CNNVD:CNNVD-202111-878
HP Color LaserJet Pro M280-M281等都是美国惠普（HP）公司的产品。HP Color LaserJet Pro M280-M281是一款打印机。HP Color LaserJet CM4540 MFP CC419A是一款多功能打印机。Hp Color LaserJet Cm4540 Mfp等都是美国惠普（Hp）公司的产品。Hp Color LaserJet Cm4540 Mfp是一款彩色多功能一体机。HP Color LaserJet Pro Mfp是一款无线多合一彩色打印机。Hp Color LaserJet Enterprise是一款惠普入门级企业级彩色多功能一体机。Hp Color LaserJet Enterprise Flow Mfp是一款一体式无线双面打印机。Hp Color LaserJet Enterprise Mfp是一款中等容量的彩色激光打印机。Hp Color LaserJet Managed是一款企业级彩色激光打印机。Hp Color LaserJet Managed Mfp是一款功能强大的多功能打印机。Hp Color LaserJet Managed Flow Mfp是一款高品质彩色打印机。
多款HP产品存在安全漏洞，该漏洞源于打印机未对第三方链接进行有效的过滤与限制。该漏洞允许通过单击第三方恶意链接在客户端浏览器中重定向页面执行跨站脚本。
solution:Upgrade hp futuresmart_3 to a higher version than 2309025_582081,2309025_582098,2309025_582089,2309025_582096,2309025_582102,2309025_582099,2309025_582093,2309025_582101,2309025_582084,2309025_582108,2309025_582106,2309025_582097,2309025_582113,2309025_582105,2309025_582104,2309025_582082,2309025_582112,2309025_582088,2309025_582091,2309025_582085,2309025_582110,2309025_582086,2309025_582103,2309025_582083,2309025_582114,2309025_582092,2309025_582087,and avoid the version (,2309025_582081),(,2309025_582098),(,2309025_582089),(,2309025_582096),(,2309025_582102),(,2309025_582099),(,2309025_582093),(,2309025_582101),(,2309025_582084),(,2309025_582108),(,2309025_582106),(,2309025_582097),(,2309025_582113),(,2309025_582105),(,2309025_582104),(,2309025_582082),(,2309025_582112),(,2309025_582088),(,2309025_582091),(,2309025_582085),(,2309025_582110),(,2309025_582086),(,2309025_582103),(,2309025_582083),(,2309025_582114),(,2309025_582092),(,2309025_582087); Upgrade hp futuresmart_4 to a higher version than 2410028_055010,2410028_055028,2410028_055035,2410028_055034,2410028_055015,2410028_055019,2410028_055002,2410028_055018,2410028_055020,2410028_055026,2410028_055041,2410028_055006,2410028_055016,2410028_055008,2410028_055011,2410028_055031,2410028_055022,2410028_055038,2410028_055029,2410028_055023,2410028_055040,2410028_055003,2410028_055039,2410028_055009,2410028_055037,2410028_055012,2410028_055004,2410028_055025,2410028_055024,2410028_055021,2410028_055007,2410028_055005,2410028_055013,2410028_055032,2410028_055030,2410028_055027,2410028_055033,2410028_055017,2410028_055014,2410028_055036,and avoid the version (,2410028_055010),(,2410028_055028),(,2410028_055035),(,2410028_055034),(,2410028_055015),(,2410028_055019),(,2410028_055002),(,2410028_055018),(,2410028_055020),(,2410028_055026),(,2410028_055041),(,2410028_055006),(,2410028_055016),(,2410028_055008),(,2410028_055011),(,2410028_055031),(,2410028_055022),(,2410028_055038),(,2410028_055029),(,2410028_055023),(,2410028_055040),(,2410028_055003),(,2410028_055039),(,2410028_055009),(,2410028_055037),(,2410028_055012),(,2410028_055004),(,2410028_055025),(,2410028_055024),(,2410028_055021),(,2410028_055007),(,2410028_055005),(,2410028_055013),(,2410028_055032),(,2410028_055030),(,2410028_055027),(,2410028_055033),(,2410028_055017),(,2410028_055014),(,2410028_055036)