CVE-2012-3272: XSS
Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3272?
CVE-2012-3272 is rated as a medium severity vulnerability due to its cross-site scripting nature.
How do I fix CVE-2012-3272?
To fix CVE-2012-3272, update the affected HP Color LaserJet firmware to the latest version as specified by HP.
Which devices are affected by CVE-2012-3272?
CVE-2012-3272 affects multiple HP Color LaserJet models, including CM3530, CM60xx, CP3525, CP4xxx, CP6015, and others with specific firmware versions.
What type of vulnerability is CVE-2012-3272?
CVE-2012-3272 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
What are the risks associated with CVE-2012-3272?
The risks associated with CVE-2012-3272 include potential exposure to data theft and unauthorized actions being executed in the context of a user session.