CVE-2022-28624

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting (XSS). HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork 5130EL_7.10.R3507P02 and HPE FlexFabric 5945_7.10.R6635.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-286255.5A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privilegeCVE-2022-286266.7A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A hCVE-2022-286278.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286288.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286297.8A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A lCVE-2022-28634.9The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the contentCVE-2022-286307.3A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286318.8A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE IntegrateCVE-2022-286328.8A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE IntegrateCVE-2022-286337.3A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated LightCVE-2022-286346.7A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A hCVE-2022-286357.4A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in H
CVE-2022-28624: Medium severity, CVSS 4.8 | Vulnix