QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-26587

Back to search

CVE-2021-26587

Published: Sep 27, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.

VendorProductVersions

n/a

HPE StoreOnce 3620; HPE StoreOnce 3640; HPE StoreOnce 5200; HPE StoreOnce 5250; HPE StoreOnce 5650; HPE StoreOnce VSA 4TB

affected
Firmware version: 4.2.3 and earlier
affected
FW version: 4.2.3 and earlier

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now