Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2023-28083

Potential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HPE Integrated Lights-Out

Default version status: affected

  • Integrated Lights-Out 6 (iLO 6) to < 1.20affected
  • Integrated Lights-Out 5 (iLO 5) to < 2.78affected
  • Integrated Lights-Out 4 (iLO 4) to < 2.82affected

References