CVE-2021-26584: HP OneView For VMware vCenter

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).

Affected products

• HP OneView For VMware vCenter: before 10.2 (fixed in 10.2)

Published 2021-06-03. Last modified 2026-06-17.