Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

16 records in Integrated Lights-out 4 Firmware · all components

Priority MEDIUM 40

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.02094 Published 2019-06-05 No fix listed CWE-79
TI-2019-08987 CVE-2019-11983 · GHSA-3522-2rqw-j9fw

Memory corruption in HPE iLO4 and HPE iLO5

Priority LOW 33

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

CVSS 3.0HIGH 7.0 Network No auth No interaction EPSS 0.01102 Published 2019-06-05 No fix listed CWE-119
Priority LOW 32

A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01447 Published 2018-02-15 No fix listed CWE-200
Open these records in search →