HPE OneView Global Dashboard vulnerabilities

6 CVEs affecting HPE OneView Global Dashboard, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28084, published 2023-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-29217, published 2022-02-24. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global…
CVE-2021-29216, published 2022-02-24. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView…
CVE-2022-37927, published 2022-12-12. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).
CVE-2021-26585, published 2021-06-24. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView…
CVE-2023-28084, published 2023-04-25. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
CVE-2023-28085, published 2023-04-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials