Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:hpe_superdome_flex_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductHpe Superdome Flex Server (8b4a32af-f708-5f56-b7ad-891edd066481)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26589 vulnerable 2026-06-08 05:30:44.917944 Details available
A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.
Published: 2021-10-19T14:10:18.000Z
Updated: 2024-08-03T20:26:25.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26581 vulnerable 2026-06-08 05:30:44.878650 Details available
A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later.
Published: 2021-04-01T18:42:53.000Z
Updated: 2024-08-03T20:26:25.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7137 vulnerable 2026-06-08 05:27:11.980501 Details available
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue.
Published: 2020-05-19T22:04:12.000Z
Updated: 2024-08-04T09:18:03.131Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.