High severity8.8NVD Advisory· Published Jun 17, 2019· Updated Jun 17, 2026

CVE-2019-6325

Description

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

Affected products

HP/Color LaserJet Pro M280-M281 Multifunction Printer seriesdescription
Microfocus/T6b80a Firmware
cpe:2.3:o:hp:t6b80a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-19
Microfocus/T6b83a Firmware
cpe:2.3:o:hp:t6b83a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-19
Microfocus/T6b81a Firmware
cpe:2.3:o:hp:t6b81a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-19
Microfocus/T6b82a Firmware
cpe:2.3:o:hp:t6b82a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-19
Microfocus/W2g54a Firmware
cpe:2.3:o:hp:w2g54a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-26
Microfocus/W2g55a Firmware
cpe:2.3:o:hp:w2g55a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-26
Microfocus/Y5s53a Firmware
cpe:2.3:o:hp:y5s53a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-26
Microfocus/Y5s55a Firmware
cpe:2.3:o:hp:y5s55a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-26
Microfocus/Y5s50a Firmware
cpe:2.3:o:hp:y5s50a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-26
Microfocus/Y5s54a Firmware
cpe:2.3:o:hp:y5s54a_firmware:*:*:*:*:*:*:*:*
Range: <2019-04-26
Microfocus/Color LaserJet Pro M280-M281 Multifunction Printer seriesllm-create
Range: < 20190419
Microfocus/LaserJet Pro MFP M28-M31 Printer seriesllm-create
Range: < 20190426

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2019-6325

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions