CVE-2021-26584

2021-06-0310:59:53

hpe

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).

CNA Affected

[
  {
    "product": "HPE OneView for VMware vCenter with Operations Manager and Log Insight",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 10.2"
      }
    ]
  }
]