A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS).
References
Link | Resource |
---|---|
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
22 Apr 2021, 15:06
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-79 | |
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
References | (MISC) https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us - Vendor Advisory | |
CPE | cpe:2.3:a:hp:icewall_sso_dgfw:11.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:11i:v3.0:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:hp:icewall_sso_dgfw:10.0:*:*:*:*:*:*:* |
15 Apr 2021, 19:32
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-15 18:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-26582
Mitre link : CVE-2021-26582
CVE.ORG link : CVE-2021-26582
JSON object : View
Products Affected
microsoft
- windows
hp
- hp-ux
- icewall_sso_dgfw
redhat
- enterprise_linux
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')