6 matches found
CVE-2023-28085
CVE-2023-28085 relates to HPE OneView Global Dashboard (OVGD). The connected documents indicate that an OVGD appliance dump may expose OVGD user account credentials. Key details from the sources show a local attack vector with low privileges required, and a high confidentiality impact, yielding a...
CVE-2021-29216
CVE-2021-29216 describes a remote cross-site scripting vulnerability in Hewlett Packard Enterprise’s OneView Global Dashboard (OVGD) affecting versions prior to 2.5. The vulnerability exists in the OVGD component and is addressed by HPE’s software update to resolve the issue. The provided documen...
CVE-2021-29217
CVE-2021-29217 describes a remote URL redirection vulnerability in HPE OneView Global Dashboard, affecting versions prior to 2.5. The vulnerability path, impact, or root cause details are not elaborated beyond the brief description in the sources, but HP indicates a software update to resolve it....
CVE-2022-37927
CVE-2022-37927 concerns a URL redirection vulnerability (open redirect) in Hewlett Packard Enterprise’s HPE OneView Global Dashboard (OVGD). The connected sources consistently identify OVGD as the affected software and describe the issue as a URL redirection to an untrusted site. The Red Hat and ...
CVE-2023-28084
CVE-2023-28084 concerns HPE OneView and HPE OneView Global Dashboard appliances. The connected sources confirm that a device dump could expose authentication tokens, constituting a confidentiality impact described as high. The affected components are HPE OneView and HPE OneView Global Dashboard a...
CVE-2021-26585
CVE-2021-26585 affects HPE OneView Global Dashboard release 2.31, with a local disclosure of privileged information. The issue is resolved by updating to release 2.32. The NVD notes a low base score (CVSS v2.0: 2.1) and a medium base score (CVSS v3.1: 5.5) with local attack vector and no user int...