Vulnerability · Published Jun 27, 2022 · Assigned by hpe
CVE-2022-28622
High 7.5
In plain English
A high-severity security flaw in HPE StoreOnce Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.8%top 42.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE StoreOnce Software | Prior to 4.3.2 |