Read the docs
TI-2023-12662 Aliases CVE-2023-28083GHSA-38pw-vp6h-qrfm

Cross-site scripting in Hewlett Packard Enterprise (HPE) Integrated Lights-Out

Priority LOW 38CWE-79Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00445 38th percentileScored 2026-11-07
Fix Fixed Integrated Lights-Out (HPE): 1.20, 2.78, 2.82

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard Enterprise (HPE)Integrated Lights-OutIntegrated Lights-Out 6 (iLO 6) to before 1.20; Integrated Lights-Out 5 (iLO 5) to before 2.78; Integrated Lights-Out 4 (iLO 4) to before 2.821.20, 2.78, 2.82Patch availableCNA
  • Integrated Lights-Out VendorHewlett Packard Enterprise (HPE) Affected Integrated Lights-Out 6 (iLO 6) to before 1.20; Integrated Lights-Out 5 (iLO 5) to before 2.78; Integrated Lights-Out 4 (iLO 4) to before 2.82 Fixed in 1.20, 2.78, 2.82 Patch available CNA

CPE configurations NVD · 162

CPEVersionsRoleVendor
cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*before 2.82VulnerableHewlett Packard Enterprise
cpe:2.3:h:hpe:apollo_4200_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_r2000_chassis:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
Show 152 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:hpe:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl385p_gen8_\(amd\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl580_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_microserver_gen8:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl230b_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl270d_gen9_special_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1430_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1440_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1450_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1530_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1540_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1550_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1630_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1640_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1650_expanded_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1650_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1830_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1840_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1850_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3830_gateway_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3830_gateway_storage_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3840_gateway_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3840_gateway_storage_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3850_gateway_single_node_upgrade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3850_gateway_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_3850_gateway_storage_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storevirtual_3000_file_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_480_gen9_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_620_gen9_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_660_gen9_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_680_gen9_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hp:integrated_lights-out_5:*:*:*:*:*:*:*:*before 2.78VulnerableHewlett Packard Enterprise
cpe:2.3:h:hpe:apollo_4200_gen10_plus_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_4200_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_4510_gen10_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_6500_gen10_plus_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_6500_gen10_system:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_r2200_gen10:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_r2600_gen10:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:apollo_r2800_gen10:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:edgeline_e920_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:edgeline_e920d_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:edgeline_e920t_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl120_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl160_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl180_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl20_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl325_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl360_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl380_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl385_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl560_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl580_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx360_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx380_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dx560_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_e910_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_e910t_server_blade:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml110_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml350_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl450_gen10_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storage_file_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storage_performance_file_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1460_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1560_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1660_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:storeeasy_1860_storage:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_480_gen10_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_480_gen10_plus_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:synergy_660_gen10_compute_module:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hp:integrated_lights-out_6:*:*:*:*:*:*:*:*before 1.20VulnerableHewlett Packard Enterprise
cpe:2.3:h:hpe:proliant_dl320_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl325_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl345_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl360_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl365_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl380_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_dl385_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:proliant_ml350_gen11_server:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)

Remediation

  • Fix · CNA Integrated Lights-Out (HPE) Fixed in 1.20, 2.78, 2.82

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-28083
  2. 2026-10-03 Alias added: GHSA-38pw-vp6h-qrfm

References

  • TI-2025-25062 A remote code execution issue exists in HPE OneView. KEVCVSS 3.1CRITICAL 10.0
  • TI-2017-03684 Improper privilege management in Intel Active Mangement Technology, Intel Small Business… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2024-35876 Path traversal in Hewlett Packard Enterprise (HPE) HPE Insight Remote Support CVSS 3.1CRITICAL 9.8
  • TI-2020-05748 A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could… CVSS 3.1CRITICAL 9.8
  • TI-2024-35875 XML injection in Hewlett Packard Enterprise (HPE) HPE Insight Remote Support CVSS 3.1HIGH 7.5
See all 927 →

Sources