VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Apr 15, 2021· Updated Jun 17, 2026

CVE-2021-26582

CVE-2021-26582

Description

A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS).

Affected products

4
  • Microfocus/Icewall SSO Dgfw2 versions
    cpe:2.3:a:hp:icewall_sso_dgfw:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:icewall_sso_dgfw:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:icewall_sso_dgfw:11.0:*:*:*:*:*:*:*
  • HPE/IceWall SSO Domain Gateway Option (Dgfw) moduledescription
  • HPE/IceWall SSO Domain Gateway Option (Dgfw) modulellm-fuzzy
    Range: 10.0 on RHEL 5/6/7, 10.0 on HP-UX 11i v3, 10.0 on Windows, 11.0 on Windows

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.