CVE-2019-11992

CVE-2019-11992 concerns HPE OneView for VMware vCenter 9.5, where a remote attacker can trigger a Cross-Site Scripting vulnerability due to lack of proper input validation in the WEB application. Red Hat and CNVD entries reiterate the same issue and specify the impact as client-side code executio...

HPESBGN03957 rev.1 - HPE Oneview for VMware vCenter, Remote Cross-Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight 9.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11992 |...