Description
A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HPE | Integrated Lights-Out | Integrated Lights-Out 6 (iLO 6) – < 1.20, Integrated Lights-Out 5 (iLO 5) – < 2.78, Integrated Lights-Out 4 (iLO 4) – < 2.82 | 1.20 |
Advisories 1
- WID-SEC-2023-0650 HPE Integrated Lights-Out: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Mar 14, 2023