CVE-2023-28086

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An HPE OneView appliance dump may expose proxy credential settings

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Apr 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-280875.5An HPE OneView appliance dump may expose OneView user accountsCVE-2023-280887.8An HPE OneView appliance dump may expose SAN switch administrative credentialsCVE-2023-280897.1An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect ModulesCVE-2023-28099.8Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to eCVE-2023-280905.5An HPE OneView appliance dump may expose SNMPv3 read credentialsCVE-2023-280915.5HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dumpCVE-2023-280926.8A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system beinCVE-2023-280936.5A user with a compromised configuration can start an unsigned binary as a service.CVE-2023-280949.8Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credenCVE-2023-280957.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in `msg_tranCVE-2023-280967.5OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.CVE-2023-280977.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing
CVE-2023-28086: Medium severity, CVSS 5.5 | Vulnix