CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23697
https://notcve.org/view.php?id=CVE-2022-23697
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. Se ha detectado una vulnerabilidad de tipo cross-site scripting (xss) remoto en HPE OneView versión(es): Anteriores a 6.6. HPE ha proporcionado una actualización de software para resolver esta vulnerabilidad en HPE OneView • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2021-26584
https://notcve.org/view.php?id=CVE-2021-26584
A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC). Una vulnerabilidad de seguridad en HPE OneView para VMware vCenter (OV4VC) podría ser explotada remotamente para permitir el Cross-Site Scripting. HPE ha publicado la siguiente actualización de software para resolver la vulnerabilidad en HPE OneView para VMware vCenter (OV4VC). • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04151en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 21EXPL: 0CVE-2020-7198
https://notcve.org/view.php?id=CVE-2020-7198
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2. Se presenta una posible escalada de privilegios remota para un usuario malicioso que posee una cuenta de OneView en OneView y Synergy Composer. HPE ha proporcionado actualizaciones para Oneview y Synergy Composer: Actualice a la versión 5.5 de OneView, Composer o Composer2 • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7130
https://notcve.org/view.php?id=CVE-2020-7130
HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or Install of OVGD Version 1.9, Appliance Firewall May Leave Ports Open. This is resolved in OVGD 1.91 or later. HPE OneView Global Dashboard (OVGD) versión 1.9, presenta una vulnerabilidad de divulgación de información remota. HPE OneView Global Dashboard- Después de la Actualización o en Instalación de OVGD versión 1.9, el Firewall del Dispositivo Puede Dejar Los Puertos Abiertos. • https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf03987en_us • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2019-11992
https://notcve.org/view.php?id=CVE-2019-11992
A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting. Una vulnerabilidad de seguridad en HPE OneView para VMware vCenter versión 9.5, podría ser explotada remotamente para permitir un ataque de tipo Cross-Site Scripting. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03957en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •