CVE-2020-7132

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard...

EUVD-2020-28266

Malware in sbrugna...

HPE Onboard Administrator Cross-Site Scripting Vulnerability

HPE Onboard Administrator is a management program for HP BladeSystem c-series servers from Hewlett Packard Enterprise HPE. A cross-site scripting vulnerability exists in HPE Onboard Administrator version v4.85. The vulnerability stems from a lack of proper validation of client data by the WEB...

Cross site scripting

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard...

CVE-2020-7132

CVE-2020-7132 corresponds to a Reflected Cross-Site Scripting vulnerability in HPE Onboard Administrator. Connected docs indicate the issue stems from insufficient validation in the web interface, with remediation provided via OA 4.95 (Linux/Windows). Public details mention the vulnerability remo...