Web Jetadmin
Vendor:
First CVE: Mar 24, 2004 · Active for 22 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.4
Avg CVEs / Year
Higher CVE frequency than 56% of tracked products
5.3
Avg CVSS
Higher Avg CVSS than 11% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Web Jetadmin over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 24, 2004
22 years ago
Most Recent CVE
Jan 23, 2018
3,103 days ago
CVE Severity & Scoring
Web Jetadmin7 CVEs
14%
57%
29%
All CVEs352,101 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network1 (14.3%)
Unknown6 (85.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (14.3%)
High0 (0.0%)
Unknown6 (85.7%)
User Interaction
None1 (14.3%)
Unknown6 (85.7%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (14.3%)
Unknown6 (85.7%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude para | Mar 24, 2004 | 2.1 | 61 | NO | YES |
CVE-2004-1856MEDIUM devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory. | Mar 24, 2004 | 5.0 | 36 | NO | YES |
CVE-2009-4182HIGH Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possib | Jan 14, 2010 | 9.0 | 22 | NO | NO |
CVE-2017-2742HIGH A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service. | Jan 23, 2018 | 7.5 | 20 | NO | NO |
CVE-2012-2011MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Jun 13, 2012 | 4.3 | 19 | NO | NO |
CVE-2011-0278MEDIUM Unspecified vulnerability in HP Web Jetadmin 10.2 Service Release 3 and 4 allows local users to bypass intended access restrictions via unknown vectors. | Mar 1, 2011 | 4.3 | 16 | NO | NO |
CVE-2004-1858MEDIUM HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly due to a stricmp() error from an invalid use of the "$" char | Dec 31, 2004 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
28.6% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Web Jetadmin
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.1 | 1 | 4.3 | 1.6% | 0 | 0 |
| 8.0 | 1 | 4.3 | 1.6% | 0 | 0 |
| 7.5.2546 | 2 | 3.5 | 58.2% | 0 | 2 |
| 10.4 | 1 | 7.5 | 3.5% | 0 | 0 |
| 10.2 | 2 | 5.9 | 0.8% | 0 | 0 |