Skip to content
Sign in
Not rated

CVE-2021-26589 A potential security vulnerability has been identified in HPE Superdome Flex Servers

Description

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.

Affected products and versions

Product Affected versions Fixed in
HPE Superdome Flex Server Versions not published

Other CVEs of HPE Superdome Flex Server

The 3 CVEs of HPE Superdome Flex Server →
CVE-2021-26581 A potential security vulnerability has been identified in HPE Superdome Flex server Not rated CVE-2020-7137 A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege Not rated
Track this CVE