Vulnerability · Published Jul 8, 2022 · Assigned by hpe
CVE-2022-28624
Medium 4.8
In plain English
A medium-severity security flaw in HPE FlexNetwork 5130 EI Switch Series; HPE FlexFabric 5945 Switch Series. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS NVD)4.8Medium
Exploit odds (30 days)0.4%top 61.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting (XSS). HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork 5130EL_7.10.R3507P02 and HPE FlexFabric 5945_7.10.R6635.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE FlexNetwork 5130 EI Switch Series; HPE FlexFabric 5945 Switch Series | Prior to Version 5130EL_7.10.R3507P02 and Prior to Version 5945_7.10.R6635 |