CVE-2021-26589

This CVE concerns HPE Superdome Flex Servers where a Cross Site Scripting (XSS) vulnerability arises because the Session Cookie lacks the HttpOnly attribute. Public sources (NVD entry) describe remote exploitation potential and provide a firmware update from HPE as the remediation. The NVD CVSS v...

HPESBHF04199 rev.1 - HPE Superdome Flex Server, Remote Cross Site scripting (XSS) vulnerability

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to Version 3.40.106 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26589 |...