DeutschShown in its original language — a full translation is planned for a future version.
HPE Integrated Lights-Out: Mehrere Schwachstellen
view advisory published 2021-05-25
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in HPE Integrated Lights-Out ausnutzen, um Cross-Site Scripting Angriffe durchzuführen und Code zur Ausführung zu bringen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-46846US | medium6.1 | — | ||
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.
| ||||
| CVE-2021-29211US | medium4.8 | — | ||
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity… | ||||
| CVE-2021-29210US | medium4.8 | — | ||
A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Ser… | ||||
| CVE-2021-29209US | medium4.8 | — | ||
A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Ser… | ||||
| CVE-2021-29208US | medium4.8 | — | ||
A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Ser… | ||||
| CVE-2021-29207US | medium4.8 | — | ||
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity… | ||||
| CVE-2021-29206US | medium4.8 | — | ||
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity… | ||||
| CVE-2021-29205US | medium4.8 | — | ||
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity… | ||||
| CVE-2021-29204US | medium4.8 | — | ||
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity… | ||||
| CVE-2021-29202US | medium6.7 | — | ||
A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE… | ||||
| CVE-2021-29201US | medium4.8 | — | ||
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan