HPE Superdome Flex 280 Firmware vulnerabilities

2 CVEs affecting HPE Superdome Flex 280 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-37933, published 2023-01-05.

More from HPE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-26589, published 2021-10-19. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is…
• CVE-2022-37933, published 2023-01-05. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has…