Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29142 State: PUBLISHED Published: 2021-04-29T12:08:56 Last Updated: 2024-08-03T22:02:50.347Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote cross site scripting (xss) Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29143 State: PUBLISHED Published: 2021-07-22T13:31:38 Last Updated: 2024-08-03T22:02:50.516Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: remote execution of arbitrary commands Description: A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - ver
Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt
CVE ID: CVE-2021-29144 State: PUBLISHED Published: 2021-04-29T11:52:27 Last Updated: 2024-08-03T22:02:50.867Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote disclosure of sensitive information Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29145 State: PUBLISHED Published: 2021-04-29T11:31:10 Last Updated: 2024-08-03T22:02:50.336Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote server side request forgery (ssrf), remote code execution Description: A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29146 State: PUBLISHED Published: 2021-04-29T11:21:28 Last Updated: 2024-08-03T22:02:50.597Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote cross site scripting (xss) Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29147 State: PUBLISHED Published: 2021-04-29T11:58:09 Last Updated: 2024-08-03T22:02:51.158Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitray command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29148 State: PUBLISHED Published: 2021-07-22T13:37:41 Last Updated: 2024-08-03T22:02:51.312Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: local cross-site scripting (XSS) Description: A local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior
s, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt
CVE ID: CVE-2021-29149 State: PUBLISHED Published: 2021-07-22T13:42:08 Last Updated: 2024-08-03T22:02:51.440Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: local bypass security restrictions Description: A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions pr
eries, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt
CVE ID: CVE-2021-29150 State: PUBLISHED Published: 2021-07-08T14:08:22 Last Updated: 2024-08-03T22:02:50.869Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote insecure deserialization Description: A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-29151 State: PUBLISHED Published: 2021-07-08T15:14:38 Last Updated: 2024-08-03T22:02:51.242Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote authentication bypass Description: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-29152 State: PUBLISHED Published: 2021-07-08T15:27:33 Last Updated: 2024-08-03T22:02:50.864Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote denial of service (DoS) Description: A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-29154 State: PUBLISHED Published: 2021-04-08T00:00:00 Last Updated: 2024-08-03T22:02:50.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.d
W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://www.openwall.com/lists/oss-security/2021/04/08/1 - https://news.ycombinator.com/item?id=26757760 - http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html - https://security.netapp.com/advisory/ntap-20210604-0006/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4d4d456436bfb2fe412ee2cd489f7658449b098 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=26f55a59dc65ff
fb2fe412ee2cd489f7658449b098 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=26f55a59dc65ff77cd1c4b37991e26497fc68049
CVE ID: CVE-2021-29155 State: PUBLISHED Published: 2021-04-20T00:00:00 Last Updated: 2024-08-03T22:02:51.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations. Additional Analyst Notes: - CVE Program Container: References: - https:
nted for when restricting subsequent operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.kernel.org - https://www.openwall.com/lists/oss-security/2021/04/18/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://git.kernel.org/cgit/linux/
5W5EPHWJQ7QWX/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9601148392520e2e134936e76788fc2a6371e7be - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f55b2f2a1178856c19bbce2f71449926e731914 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=24c109bb1537c12c02aeed2d51a347b4d6a9b76e - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b658bbb844e28f1862867f37e8ca11a8e2aa94a3 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d - https://git.kernel.org/c
/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073815b756c51ba9d8384d924c5d1c03ca3d1ae4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f528819334881fd622fdadeddb3f7edaed8b7c9b - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0
CVE ID: CVE-2021-29156 State: PUBLISHED Published: 2021-03-25T08:20:13 Last Updated: 2024-08-03T22:02:51.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/research/hidden-oauth-attack-vectors - https://bugster.forgerock.org/jira/browse/OPENAM-10135
CVE ID: CVE-2021-29157 State: PUBLISHED Published: 2021-06-28T11:58:41 Last Updated: 2024-08-03T22:02:51.122Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. Additional Analyst Notes: - CVE Program Container: References: - https://dovecot.org/security - https://www.openwall.com/lists/oss-security/2021/06/28/1 - https://lists.fedoraproject.or
https://dovecot.org/security - https://www.openwall.com/lists/oss-security/2021/06/28/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/ - https://security.gentoo.org/glsa/202107-41
CVE ID: CVE-2021-29158 State: PUBLISHED Published: 2021-04-23T20:34:00 Last Updated: 2024-08-03T22:02:51.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base - https://support.sonatype.com/hc/en-us/articles/1500006126462
CVE ID: CVE-2021-29159 State: PUBLISHED Published: 2021-04-28T13:14:41 Last Updated: 2024-08-03T22:02:50.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base - https://support.sonatype.com/hc/en-us/articles/150000503108
s/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base - https://support.sonatype.com/hc/en-us/articles/1500005031082
CVE ID: CVE-2021-29200 State: PUBLISHED Published: 2021-04-27T19:50:13 Last Updated: 2024-08-03T22:02:50.505Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: Java serialisation Description: Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cdev.ofbiz.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/04/27/4 - https://lists.apache.org/thread.html/r708351f1a8af7adb887cc3d8a92bed8fcbff4a9e495e69a9ee546fda%40%3Cnotifications.ofbiz
https://lists.apache.org/thread.html/r708351f1a8af7adb887cc3d8a92bed8fcbff4a9e495e69a9ee546fda%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cuser.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cdev.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rbe8439b26a71fc3b4
33779c23f144b9b60596b113b7bf1e8097%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E
CVE ID: CVE-2021-29201 State: PUBLISHED Published: 2021-05-25T13:24:14 Last Updated: 2024-08-03T22:02:51.300Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote xss Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/
ion(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE ID: CVE-2021-29202 State: PUBLISHED Published: 2021-05-25T13:24:19 Last Updated: 2024-08-03T22:02:50.533Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: local buffer overflow Description: A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - ht
iVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE ID: CVE-2021-29203 State: PUBLISHED Published: 2021-05-06T20:17:36 Last Updated: 2024-08-03T22:02:51.294Z Vendors: n/a Products: HPE Edgeline Infrastructure Management Software Problem Types: remote authentication bypass Description: A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edge
service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-15 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04124en_us
CVE ID: CVE-2021-29204 State: PUBLISHED Published: 2021-05-25T13:37:40 Last Updated: 2024-08-03T22:02:51.095Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote xss Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/
CVE ID: CVE-2021-29205 State: PUBLISHED Published: 2021-05-25T13:37:43 Last Updated: 2024-08-03T22:02:51.271Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote xss Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/
CVE ID: CVE-2021-29206 State: PUBLISHED Published: 2021-05-25T13:53:25 Last Updated: 2024-08-03T22:02:51.072Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote xss Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/
CVE ID: CVE-2021-29207 State: PUBLISHED Published: 2021-05-25T13:53:29 Last Updated: 2024-08-03T22:02:51.367Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote xss Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/
CVE ID: CVE-2021-29208 State: PUBLISHED Published: 2021-05-25T14:32:42 Last Updated: 2024-08-03T22:02:51.221Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote dom xss, crlf injection Description: A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container
ity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us