CVE-2020-7140

MEDIUM

HPE IceWall SSO DFW and Dgfw - Remote Cross-Site Scripting

Title source: llm

Description

A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewall_patchaccess

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04011en_us

Scores

CVSS v3 6.1

EPSS 0.0040

EPSS Percentile 60.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

hp/icewall_sso_dfw 11.0

hp/icewall_sso_dgfw 11.0

Published Jul 08, 2020

Tracked Since Feb 18, 2026