ON
Product
Oneview
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 10Low 0
Watch
Add Oneview to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23706 | 6.1 | May 17 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0 Affected: before 7.0 |
| CVE-2022-23697 | 6.1 | Apr 4 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6 Affected: before 6.6 |
| CVE-2023-6573 | 5.5 | Jan 23 | HPE OneView may have a missing passphrase during restore Affected: before 8.70 |
| CVE-2023-28084 | 5.5 | Apr 25 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens Affected: before 6.60.04; 7.0 before 8.2 |
| CVE-2023-28090 | 5.5 | Apr 25 | An HPE OneView appliance dump may expose SNMPv3 read credentials Affected: before 6.60.04; before 8.2 |
| CVE-2023-28087 | 5.5 | Apr 25 | An HPE OneView appliance dump may expose OneView user accounts Affected: before 6.60.04; before 8.2 |
| CVE-2023-28086 | 5.5 | Apr 25 | An HPE OneView appliance dump may expose proxy credential settings Affected: before 6.60.04; before 8.2 |
| CVE-2023-28091 | 5.5 | Apr 14 | HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump Affected: 7.0 through 8.1 |
| CVE-2022-28625 | 5.5 | Aug 31 | A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01 Affected: before 6.60.01 |
| CVE-2022-23700 | 5.5 | Apr 4 | A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6 Affected: before 6.6 |
Showing 10
