HP Icewall SSO Dgfw vulnerabilities

2 CVEs affecting HP Icewall SSO Dgfw, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26582, published 2021-04-15.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7140, published 2020-07-08. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE has provided the following information…
• CVE-2021-26582, published 2021-04-15. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be…