CVE-2022-28624
A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting (XSS). HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork 5130EL_7.10.R3507P02 and HPE FlexFabric 5945_7.10.R6635.
Published:Jul 8, 2022
Last Modified:Nov 21, 2024
EPS:Jul 8, 2022
EPSS Score:0.00455
CVSS Score:4.8
Affected Products
Vendor
Product
Action
Vendor
Hpe
Product
Flexfabric 5945
Hpe
Flexfabric 5945
Vendor
Hpe
Product
Flexfabric 5945 Firmware
Hpe
Flexfabric 5945 Firmware
Vendor
Hpe
Product
Flexnetwork 5130 Ei
Hpe
Flexnetwork 5130 Ei
Vendor
Hpe
Product
Flexnetwork 5130 Ei Firmware
Hpe
Flexnetwork 5130 Ei Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
