hpe

storeonce_3640_firmware

2 known vulnerabilities · sorted by CVSS score

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.

hpe / storeonce_3640_firmware

Network

Published Jun 27, 2022

CVE-2021-26587

MEDIUM6.5

A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.

hpe / storeonce_5200_firmware+5

Network

Published Sep 27, 2021