Hpe Storeonce 3640 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hpe Storeonce 3640, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2021-26587hpestoreonce_3620_firmware+5
EPSS score
0.50%
A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.7.5CVE-2022-28622hpestoreonce_3640_firmware
EPSS score
0.80%
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.