HP MSA 2060 Vulnerability Assessment

[OM4]

Hi Admin

We have one "Vulnerability Assessment Report" about HP MSA 2060 at controller A,  controller B
JQuery 1.2 < 3.5.0 Multiple XSS
I didn't find any setting about web, How can I check ?

[JSH-MSA]

I assume this is for CVE-2020-11022 based on the JQuery versions listed. The MSA 1060/2060/2062 is not vulnerable because the array does not pass html containing <option> elements from untrusted sources to jQuery's DOM manipulation methods.

[ArunKKR]

Hi,

From MSA n-2 firmware version IN110R001 release notes:

The following enhancements have been added in the IN110R001 release:
Applied patches to mitigate CVE-2020-11022 and CVE-2020-11023.

Release notes download link:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00116234en_us

[Sunitha_Mod · Accepted solution]

Hello @OM4,

Let us know if you were able to resolve the issue.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.