Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-23680 State: PUBLISHED Published: 2022-09-06T17:18:53 Last Updated: 2024-08-03T03:51:45.480Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches; Problem Types: Failure to provide CSRF Protection Description: AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.106
CVE ID: CVE-2022-23681 State: PUBLISHED Published: 2022-09-06T17:18:53 Last Updated: 2024-08-03T03:51:45.923Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface Description: Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise i
ttacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.06.xxxx: 10.06.0180 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23682 State: PUBLISHED Published: 2022-09-06T17:18:53 Last Updated: 2024-08-03T03:51:45.924Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface Description: Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise i
CVE ID: CVE-2022-23683 State: PUBLISHED Published: 2022-09-06T17:18:53 Last Updated: 2024-08-03T03:51:45.907Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Authenticated Remote Code Execution in AOS-CX Network Analytics Engine(NAE) Description: Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a
esult in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23684 State: PUBLISHED Published: 2022-09-06T17:18:53 Last Updated: 2024-08-03T03:51:45.908Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Authenticated Privilege Escalation in the Web-Management Interface Description: A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyon
of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23685 State: PUBLISHED Published: 2022-09-20T20:12:50.000Z Last Updated: 2025-05-27T18:16:36.683Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Cross-Site Request Forgery (CSRF) Protections Description: A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against these endpoints if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below;
erface to interact with a specially crafted URL in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt
CVE ID: CVE-2022-23686 State: PUBLISHED Published: 2022-09-06T17:18:54 Last Updated: 2024-08-03T03:51:45.750Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Multiple Vulnerabilities in AOS-CX LLDP Service Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.0
lity of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23687 State: PUBLISHED Published: 2022-09-06T17:18:54 Last Updated: 2024-08-03T03:51:45.628Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Multiple Vulnerabilities in AOS-CX LLDP Service Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.0
CVE ID: CVE-2022-23688 State: PUBLISHED Published: 2022-09-06T17:18:55 Last Updated: 2024-08-03T03:51:45.945Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Multiple Vulnerabilities in AOS-CX LLDP Service Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.0
CVE ID: CVE-2022-23689 State: PUBLISHED Published: 2022-09-06T17:18:55.000Z Last Updated: 2025-06-17T19:29:06.278Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Multiple Vulnerabilities in AOS-CX LLDP Service Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX
ilability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23690 State: PUBLISHED Published: 2022-09-06T17:18:55 Last Updated: 2024-08-03T03:51:45.983Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Unauthenticated Sensitive Information Disclosure in AOS-CX via Web-Management Interface Description: A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target th
X running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further exploitation in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23691 State: PUBLISHED Published: 2022-09-06T17:18:55 Last Updated: 2024-08-03T03:51:45.915Z Vendors: n/a Products: Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Problem Types: Local Authentication Bypass Vulnerability in Recovery Console Description: A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s
allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE ID: CVE-2022-23692 State: PUBLISHED Published: 2022-09-20T20:11:45.000Z Last Updated: 2025-05-28T15:50:51.498Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated SQL Injection Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and be
e compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt
CVE ID: CVE-2022-23693 State: PUBLISHED Published: 2022-09-20T20:10:37.000Z Last Updated: 2025-05-28T15:51:17.652Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated SQL Injection Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and be
CVE ID: CVE-2022-23694 State: PUBLISHED Published: 2022-09-20T20:08:20.000Z Last Updated: 2025-05-29T13:20:30.412Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated SQL Injection Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and be
CVE ID: CVE-2022-23695 State: PUBLISHED Published: 2022-09-20T20:09:25.000Z Last Updated: 2025-05-29T13:19:16.003Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated SQL Injection Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and be
CVE ID: CVE-2022-23696 State: PUBLISHED Published: 2022-09-20T20:03:22.000Z Last Updated: 2025-05-28T15:51:42.700Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated SQL Injection Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and be
CVE ID: CVE-2022-23697 State: PUBLISHED Published: 2022-04-04T19:45:39 Last Updated: 2024-08-03T03:51:45.688Z Vendors: n/a Products: HPE OneView Problem Types: remote cross-site scripting (xss) Description: A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us
CVE ID: CVE-2022-23698 State: PUBLISHED Published: 2022-04-04T19:45:40 Last Updated: 2024-08-03T03:51:45.687Z Vendors: n/a Products: HPE OneView Problem Types: remote unauthenticated disclosure of information Description: A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us
CVE ID: CVE-2022-23699 State: PUBLISHED Published: 2022-04-04T19:45:41 Last Updated: 2024-08-03T03:51:45.955Z Vendors: n/a Products: HPE OneView Problem Types: local authentication restriction bypass Description: A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us
CVE ID: CVE-2022-23700 State: PUBLISHED Published: 2022-04-04T19:45:42 Last Updated: 2024-08-03T03:51:45.927Z Vendors: n/a Products: HPE OneView Problem Types: local unauthorized read access to files Description: A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us
CVE ID: CVE-2022-23701 State: PUBLISHED Published: 2022-02-24T21:05:21 Last Updated: 2024-08-03T03:51:45.987Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) Problem Types: remote host header injection Description: A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60. This vulnerability could be remotely exploited to allow an attacker to supply invalid input to the iLO 4 webserver, causing it to respond with a redirect to an attacker-controlled domain. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 4 (iLO 4). Additional Analyst Not
provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 4 (iLO 4). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04249en_us
CVE ID: CVE-2022-23702 State: PUBLISHED Published: 2022-04-12T16:11:36 Last Updated: 2024-08-03T03:51:45.662Z Vendors: n/a Products: HPE Superdome Flex Server; HPE Superdome Flex 280 Server Problem Types: local escalation of privilege Description: A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later. Additional Analyst Notes: - CVE Program Container: Refer
later, HPE Superdome Flex 280 Server Version 1.20.204 or later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04266en_us
CVE ID: CVE-2022-23703 State: PUBLISHED Published: 2022-04-12T16:11:37 Last Updated: 2024-08-03T03:51:46.006Z Vendors: n/a Products: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays Problem Types: remote code execution Description: A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays during update. This would potentially allow an attacker to intercept and modify network communication for software updates initiated by the Nimble appliance. The following NimbleOS versions, and all subsequent releases, contain a softwa
pdates initiated by the Nimble appliance. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 5.0.10.100, 5.2.1.500, 6.0.0.100 Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04268en_us
CVE ID: CVE-2022-23704 State: PUBLISHED Published: 2022-05-09T20:17:34 Last Updated: 2024-08-03T03:51:45.936Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) Problem Types: remote denial of service (DoS) Description: A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us
CVE ID: CVE-2022-23705 State: PUBLISHED Published: 2022-05-09T20:20:57 Last Updated: 2024-08-03T03:51:45.986Z Vendors: n/a Products: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays Problem Types: remote bypass security restrictions Description: A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or late
rray. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04273en_us
CVE ID: CVE-2022-23706 State: PUBLISHED Published: 2022-05-17T20:01:57 Last Updated: 2024-08-03T03:51:46.063Z Vendors: n/a Products: HPE OneView Problem Types: remote cross-site scripting (xss) Description: A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04278en_us
CVE ID: CVE-2022-23707 State: PUBLISHED Published: 2022-02-11T17:40:27 Last Updated: 2024-08-03T03:51:45.679Z Vendors: Elastic Products: Kibana Problem Types: CWE-79 Description: An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215