Search Results (27 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-23699 1 Hp 1 Oneview 2024-11-21 7.8 High
A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23698 1 Hp 1 Oneview 2024-11-21 7.5 High
A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2022-23697 1 Hp 1 Oneview 2024-11-21 6.1 Medium
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVE-2021-26584 1 Hp 1 Oneview For Vmware Vcenter 2024-11-21 6.1 Medium
A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).
CVE-2020-7198 1 Hp 3 Oneview, Synergy Composer, Synergy Composer 2 2024-11-21 8.8 High
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
CVE-2020-7130 1 Hp 1 Oneview Global Dashboard 2024-11-21 7.5 High
HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or Install of OVGD Version 1.9, Appliance Firewall May Leave Ports Open. This is resolved in OVGD 1.91 or later.
CVE-2019-11992 1 Hp 1 Oneview For Vmware Vcenter 2024-11-21 6.1 Medium
A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting.