Vulnerabilities > HPE > Oneview Global Dashboard > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-04-25 CVE-2023-28084 Insufficiently Protected Credentials vulnerability in multiple products
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
local
low complexity
hpe hp CWE-522
5.5
2023-04-14 CVE-2023-28085 Unspecified vulnerability in HPE Oneview Global Dashboard 2.31/2.32
An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials
local
low complexity
hpe
5.5
2022-12-12 CVE-2022-37927 Open Redirect vulnerability in HPE Oneview Global Dashboard
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).
network
low complexity
hpe CWE-601
6.1
2022-02-24 CVE-2021-29216 Cross-site Scripting vulnerability in HPE Oneview Global Dashboard
A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5.
network
low complexity
hpe CWE-79
6.1
2022-02-24 CVE-2021-29217 Open Redirect vulnerability in HPE Oneview Global Dashboard
A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5.
network
low complexity
hpe CWE-601
6.1
2021-06-24 CVE-2021-26585 Unspecified vulnerability in HPE Oneview Global Dashboard 2.31
A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information.
local
low complexity
hpe
5.5