CVE-2021-26589

2021-10-1914:10:18

hpe

www.cve.org

0.001 Low

EPSS

Percentile

34.0%

JSON

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.

CNA Affected

[
  {
    "product": "HPE Superdome Flex Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to Version 3.40.106"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04199en_us

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for CVELIST:CVE-2021-26589