CVE-2022-23706

A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*

History

25 May 2022, 19:47

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 6.1
First Time Hp
Hp oneview
CWE CWE-79
CPE cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*
References (MISC) https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04278en_us - (MISC) https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04278en_us - Patch, Vendor Advisory

17 May 2022, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-05-17 20:15

Updated : 2023-12-10 14:22


NVD link : CVE-2022-23706

Mitre link : CVE-2022-23706

CVE.ORG link : CVE-2022-23706


JSON object : View

Products Affected

hp

  • oneview
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')