1. Home
  2. CVE Database
  3. CVE-2012-3272
MEDIUM · 4.3

CVE-2012-3272

Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before ...

Vulnerability Description

Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
HpColor Laserjet Cm3530<= 53.190.8
HpColor Laserjet Cm60Xx<= 53.190.8
HpColor Laserjet Cp3525<= 06.140.3.17
HpColor Laserjet Cp4Xxx<= 07.120.5
HpColor Laserjet Cp6015<= 04.160.2
HpLaserjet P3015<= 07.140.2
HpLaserjet P4Xxx<= 04.170.2

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2012-3272?

CVE-2012-3272 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before ...

How severe is CVE-2012-3272?

CVE-2012-3272 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-3272?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Color Laserjet Cm3530, Hp Color Laserjet Cm60Xx, Hp Color Laserjet Cp3525, Hp Color Laserjet Cp4Xxx, Hp Color Laserjet Cp6015.