Cross site scripting

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

CVE-2021-26589: Incorrect Permission Assignment for Critical Resource

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

PT-2021-17065

Name of the Vulnerable Software and Affected Versions HPE Superdome Flex Servers affected versions not specified Description A potential security issue has been identified, which could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly...