What is CVE-2021-26587?

CVE-2021-26587 is a medium-severity vulnerability in Hpe Storeonce 3620, classified under Cross-site Scripting. CVSS score: 6.5/10. Published 2021-09-27.

How severe is CVE-2021-26587?

Medium severity. CVSS v3 base score is 6.5 out of 10.

XSS in Hpe Storeonce 3620

CVE-2021-26587

A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (39.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-26587?: CVE-2021-26587 is a medium-severity vulnerability in Hpe Storeonce 3620, classified under Cross-site Scripting. CVSS score: 6.5/10. Published 2021-09-27.
How severe is CVE-2021-26587?: Medium severity. CVSS v3 base score is 6.5 out of 10.