Skip to content
OpenAdvisories
High WID-SEC-2023-0650 1 CVE

HPE Integrated Lights-Out: Schwachstelle ermöglicht Cross-Site Scripting

Published Mar 14, 2023 · Updated Mar 14, 2023 · de-DE

Vendor: HPE Product: Integrated Lights-Out Product: Integrated Lights-Out 4 < 2.82 Product: Integrated Lights-Out 5 < 2.78 Product: Integrated Lights-Out 6 < 1.20 Product: ProLiant

Summary

Ein Angreifer kann eine Schwachstelle in HPE Integrated Lights-Out ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

HP Integrated Lights-Out (iLO) ist eine Server-Management Technologie bzw. wird es als Out-of-Band-Management-Technologie eingesetzt.

Vulnerabilities 1

  • High 8.3
    CVE-2023-28083

    Potential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).

    A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Ou…

    HPE Integrated Lights-Out

Revision history

  1. #1

    Initiale Fassung

References