Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Integrated Lights-out 5 Firmware · all components

Priority MEDIUM 40

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.02094 Published 2019-06-05 No fix listed CWE-79
TI-2019-08987 CVE-2019-11983 · GHSA-3522-2rqw-j9fw

Memory corruption in HPE iLO4 and HPE iLO5

Priority LOW 33

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

CVSS 3.0HIGH 7.0 Network No auth No interaction EPSS 0.01102 Published 2019-06-05 No fix listed CWE-119
Priority LOW 30

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01295 Published 2019-04-09 No fix listed CWE-79
Open these records in search →