CVE-2023-28089

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Apr 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-28099.8Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to eCVE-2023-280905.5An HPE OneView appliance dump may expose SNMPv3 read credentialsCVE-2023-280915.5HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dumpCVE-2023-280926.8A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system beinCVE-2023-280936.5A user with a compromised configuration can start an unsigned binary as a service.CVE-2023-280949.8Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credenCVE-2023-280957.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in `msg_tranCVE-2023-280967.5OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.CVE-2023-280977.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containingCVE-2023-280987.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization CVE-2023-280997.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, if `ds_is_in_list()` is used with CVE-2023-281006.5Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.
CVE-2023-28089: High severity, CVSS 7.1 | Vulnix