HP Web Jetadmin (WJA) contains a vulnerability that allows an unauthenticated actor to access arbitrary files for reading or writing through a DLL hijacking mechanism. This flaw enables manipulation of files within the system that are not intended to be accessible, potentially compromising confidentiality, integrity, and availability of the host environment. The weakness is identified as a bounds-overflow or unchecked write (CWE‑787).

HP Inc. Web Jetadmin is the affected product. No specific version information is provided in the data, so all installed instances of the application are considered potentially vulnerable.

The CVSS score of 8.9 classifies the vulnerability as high severity, indicating significant damage potential. The EPSS score is not available, but the lack of KEV inclusion suggests that active exploitation is not yet documented. Attackers would exploit the DLL hijacking path, which requires unauthenticated access to the application, making it relatively accessible. If exploited, the attacker could create or replace critical system files, leading to privilege escalation or further compromise of the host.