// For flags

CVE-2020-7140

 

Severity Score

6.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewall_patchaccess

Una vulnerabilidad de seguridad en HPE IceWall SSO Dfw y Dgfw (Domain Gateway Option) podría ser explotada remotamente para causar una vulnerabilidad de tipo cross-site scripting (XSS). HPE ha proporcionado la siguiente información para resolver esta vulnerabilidad en HPE IceWall SSO DFW y Dgfw: https://www.hpe.com/jp/icewall_patchaccess

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-01-16 CVE Reserved
  • 2020-07-08 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Hp
Search vendor "Hp"
Icewall Sso Dfw
Search vendor "Hp" for product "Icewall Sso Dfw"
11.0
Search vendor "Hp" for product "Icewall Sso Dfw" and version "11.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows
Search vendor "Microsoft" for product "Windows"
--
Safe
Hp
Search vendor "Hp"
Icewall Sso Dfw
Search vendor "Hp" for product "Icewall Sso Dfw"
11.0
Search vendor "Hp" for product "Icewall Sso Dfw" and version "11.0"
-
Affected
in Redhat
Search vendor "Redhat"
Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
--
Safe
Hp
Search vendor "Hp"
Icewall Sso Dgfw
Search vendor "Hp" for product "Icewall Sso Dgfw"
11.0
Search vendor "Hp" for product "Icewall Sso Dgfw" and version "11.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows
Search vendor "Microsoft" for product "Windows"
--
Safe
Hp
Search vendor "Hp"
Icewall Sso Dgfw
Search vendor "Hp" for product "Icewall Sso Dgfw"
11.0
Search vendor "Hp" for product "Icewall Sso Dgfw" and version "11.0"
-
Affected
in Redhat
Search vendor "Redhat"
Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
--
Safe