Medium WID-SEC-2022-1814 11 CVEs

HPE Integrated Lights-Out: Mehrere Schwachstellen

Published May 25, 2021 · Updated Dec 12, 2022 · Revision 5 · de-DE

Vendor: HPE Product: Integrated Lights-Out Product: ProLiant

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in HPE Integrated Lights-Out ausnutzen, um Cross-Site Scripting Angriffe durchzuführen und Code zur Ausführung zu bringen.

Product

HP Integrated Lights-Out (iLO) ist eine Server-Management Technologie bzw. wird es als Out-of-Band-Management-Technologie eingesetzt.

Vulnerabilities 11

Medium 6.4

CVE-2021-46846

Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.

Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out 5

Nov 3, 2022
Unscored —

CVE-2021-29201

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrat…

May 25, 2021
Unscored —

CVE-2021-29202

A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; H…

May 25, 2021
Unscored —

CVE-2021-29204

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrat…

May 25, 2021
Unscored —

CVE-2021-29205

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrat…

May 25, 2021
Unscored —

CVE-2021-29206

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrat…

May 25, 2021
Unscored —

CVE-2021-29207

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrat…

May 25, 2021
Unscored —

CVE-2021-29208

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 38…

May 25, 2021
Unscored —

CVE-2021-29209

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 38…

May 25, 2021
Unscored —

CVE-2021-29210

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 38…

May 25, 2021
Unscored —

CVE-2021-29211

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrat…

May 25, 2021

Revision history

2022-12-12 #5
CVE ergänzt
2022-10-23 #4
Neue Updates von HP aufgenommen
2021-06-03 #3
Neue Updates von HP aufgenommen
2021-06-01 #2
Neue Updates von HP aufgenommen
2021-05-25 #1
Initiale Fassung

References

HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04130en_us
HPE Security Bulletin hpesbhf04143en_us vom 2021-06-01
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04143en_us
HPE Security Bulletin HPESBHF04134 vom 2021-05-25
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04133en_us&hprpt_id=ALERT_HPE_3036245&jumpid=em_pom8nu6hj_aid-520066529