CVE-2020-7132

5.4MEDIUM

Key Information:

Vendor
HP
Status
HP Onboard Administrator
Vendor
CVE Published:
23 April 2020

Summary

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard Administrator. * OA 4.95 (Linux and Windows).

Affected Version(s)

HPE Onboard Administrator v4.85

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_MISC
https://support.hpe.com/hpesc/public/docDisplay?docLocale...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.