← Vulnerability feed

Vulnerability record · CVE-2019-18914 · published 9 November 2021

CVE-2019-18914: Hp futuresmart 3 cross-site scripting vulnerability

Hp · Futuresmart 3

A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.

6.1 CVSS 3.1 Medium EPSS 0.67% · top 50.0% CWE-79 · Cross-site scripting
6.1CVSS 3.1 base score, v2 4.3
0.67%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hp.com/us-en/document/c06546034 Vendor Advisory
https://support.hp.com/us-en/document/c06546034 Vendor Advisory

Track CVE-2019-18914 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-39238Hp futuresmart 3 classic buffer overflow vulnerabilityCertain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overf…EPSS 12%9.8CVE-2019-6334Hp futuresmart 3 vulnerabilityHP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential ex…EPSS 3.6%8.3CVE-2025-26508Hp futuresmart 3 out-of-bounds write vulnerabilityCertain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevatio…EPSS 0.97%7.8CVE-2019-18912Hp futuresmart 4 vulnerabilityA potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart F…EPSS 0.29%6.5CVE-2024-0407Hp futuresmart 4 vulnerabilityCertain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the d…EPSS 0.34%6.3CVE-2025-26507Hp futuresmart 3 stack-based buffer overflow vulnerabilityCertain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevatio…EPSS 0.94%5.4CVE-2021-3662Hp futuresmart 4 cross-site scripting vulnerabilityCertain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).EPSS 0.47%4.6CVE-2021-39237Hp futuresmart 3 vulnerabilityCertain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2019-18914), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.