CVE-2019-18914 - CVE House

Status published Medium CVE-2019-18914

A potential security vulnerability has been identified for certain HP...

6.1 CVSS

Vulnerability Description

A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18914

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://support.hp.com/us-en/document/c06546034

More from n/a

View All →

CVE-2025-9910

Versions of the package jsondiffpatch before 0.7.2 are vulnerable to...

Low 2.3

CVE-2025-9802

RemoteClinic profile.php sql injection

Medium 5.1

CVE-2025-9799

Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

Low 2.3

CVE-2025-9775

RemoteClinic edit-my-profile.php unrestricted upload

Medium 6.9

CVE-2025-9774

RemoteClinic edit-patient.php information disclosure

Medium 5.3

Affected Vendor

n/a

View all reports →

Affected Software

HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers

Vulnerable Versions:

before FS3: 2309025_582081, before FS3: 2309025_582082, before FS3: 2309025_582083, before FS3: 2309025_582084, before FS3: 2309025_582085, before FS3: 2309025_582086, before FS3: 2309025_582087, before FS3: 2309025_582088, before FS3: 2309025_582089, before FS3: 2309025_582091, before FS3: 2309025_582092, before FS3: 2309025_582093, before FS3: 2309025_582096, before FS3: 2309025_582097, before FS3: 2309025_582098, before FS3: 2309025_582099, before FS3: 2309025_582101, before FS3: 2309025_582102, before FS3: 2309025_582103, before FS3: 2309025_582104, before FS3: 2309025_582105, before FS3: 2309025_582106, before FS3: 2309025_582108, before FS3: 2309025_582110, before FS3: 2309025_582112, before FS3: 2309025_582113, before FS3: 2309025_582114, before FS4: 2410028_055002, before FS4: 2410028_055003, before FS4: 2410028_055004, before FS4: 2410028_055005, before FS4: 2410028_055006, before FS4: 2410028_055007, before FS4: 2410028_055008, ...

Timeline

Official Publish: November 9th, 2021

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.