CVE-2021-26587

A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce

published September 27, 2021

CVSS
—
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00497 · 41.7th percentile
Published
2021-09-27T14:01Z
EPSS history
Timeline
  • 27 SEP 14:01Z
    A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce
    cvelistv5