Hpe Superdome Flex 280 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hpe Superdome Flex 280, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-26589hpesuperdome_flex_firmware+1
EPSS score
0.55%
A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.7.8CVE-2022-37933hewlett packard enterprise (hpe)hpe superdome flex server; hpe superdome flex 280 server+2
EPSS score
0.28%
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware 3.60.50 and below and Superdome Flex 280 servers firmware 1.40.60 and below.