CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-37935
https://notcve.org/view.php?id=CVE-2022-37935
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password. • https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04449en_us •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2021-26584
https://notcve.org/view.php?id=CVE-2021-26584
A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC). Una vulnerabilidad de seguridad en HPE OneView para VMware vCenter (OV4VC) podría ser explotada remotamente para permitir el Cross-Site Scripting. HPE ha publicado la siguiente actualización de software para resolver la vulnerabilidad en HPE OneView para VMware vCenter (OV4VC). • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04151en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •