关键漏洞信息 漏洞标题: HPESBGN04278 rev.3 - HPE OneView, Multiple Remote Vulnerabilities 潜在安全影响: Remote 漏洞类型: - Bypass Security Restrictions - Cross-Site Scripting (XSS) - Server-Side Request Forgery (SSRF) 相关CVE编号: - CVE-2022-23706 (Remote cross-site scripting (XSS)) - CVE-2022-28616 (Remote Server-Side Request Forgery (SSRF)) - CVE-2022-28617 (Remote bypass security restrictions) 受影响产品: HPE OneView 受影响版本: - HPE OneView - Prior to 7.0, and 6.60.01 CVSS评分: - CVE-2022-23706: V3 Base Score 8.0, V2 Base Score 7.1 - CVE-2022-28616: V3 Base Score 4.6, V2 Base Score 4.0 - CVE-2022-28617: V3 Base Score 4.2, V2 Base Score 3.6 解决方案: - HPE OneView 7.0 - HPE OneView 6.60.01 发布日期: 2022-05-16 最后更新日期: 2022-08-17 报告人: Michael Musheev 支持与报告: - 支持: 通过正常HPE Services支持渠道或发送电子邮件至security-alert@hpe.com - 报告漏洞: 通过网页表单或发送电子邮件至security-alert@hpe.com