CVE-2022-37940

Katalog CVE

CVSS 6.1 · Medium EPSS 0,33%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada hpe flexfabric 5700 40xg 2qsfp+ firmware, hpe flexfabric 5700 48g 4xg 2qsfp+ firmware. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61 or later.

Rincian

Terbit di NVD

22 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04398en_us advisory vendor