CVE-2021-26582
Quick assessment
Affected
n/a IceWall SSO Dgfw
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HPE IceWall SSO是美国惠普企业公司（Hewlett Packard Enterprise，hpe）的一款为用户提供身份验证功能的单点登录程序。 HPE IceWall SSO Domain Gateway 存在跨站脚本漏洞，以下产品及版本受到影响：HPE IceWall SSO Domain Gateway 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-26582
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
HPE IceWall SSO 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HPE IceWall SSO是美国惠普企业公司（Hewlett Packard Enterprise，hpe）的一款为用户提供身份验证功能的单点登录程序。 HPE IceWall SSO Domain Gateway 存在跨站脚本漏洞，以下产品及版本受到影响：HPE IceWall SSO Domain Gateway 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | IceWall SSO Dgfw | IceWall SSO Dgfw 10.0 (RHEL, HP-UX, Windows) and IceWall SSO Dgfw 11.0 (Windows) | - |
|
II. Public POCs for CVE-2021-26582
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-26582
请登录查看更多情报信息。
Same Patch Batch · n/a · 2021-04-15 · 23 CVEs total
| CVE-2021-28242 | b2evolution SQL注入漏洞 | |
| CVE-2021-27691 | Tenda G0 操作系统命令注入漏洞 | |
| CVE-2021-27692 | Tenda G1 and G3 操作系统命令注入漏洞 | |
| CVE-2021-28055 | Centreon Web 跨站请求伪造漏洞 | |
| CVE-2021-31402 | wendu dio 注入漏洞 | |
| CVE-2020-28898 | QED ResourceXpress 输入验证错误漏洞 | |
| CVE-2021-3243 | WFilter ICF 跨站脚本漏洞 | |
| CVE-2021-27112 | Jianhua Sun LightCMS 安全漏洞 | |
| CVE-2021-31229 | ezXML 缓冲区错误漏洞 | |
| CVE-2021-27673 | Zenario CMS 跨站脚本漏洞 | |
| CVE-2021-27672 | Zenario CMS SQL注入漏洞 | |
| CVE-2021-20288 | 红帽 Red Hat Ceph 授权问题漏洞 | |
| CVE-2020-28593 | amazon COSORI Smart 安全漏洞 | |
| CVE-2020-28592 | Amazon COSORI Smart 缓冲区错误漏洞 | |
| CVE-2020-27239 | OpenClinic GA SQL注入漏洞 | |
| CVE-2020-27238 | OpenClinic GA SQL注入漏洞 | |
| CVE-2020-27237 | OpenClinic GA SQL注入漏洞 | |
| CVE-2021-30209 | Textpattern Cms 代码问题漏洞 | |
| CVE-2021-0488 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-27545 | PHP和PHPGurukul Beauty Parlour Management System SQL注入漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-26582
No comments yet