← Back

CVE-2019-11982

nvd nist
Published: Jun 5, 2019Modified: Nov 21, 2024

JSON object

Loading...
8.3
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 6.0
Source: NVD

Description

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Affected (2)

Hp
2 products
Integrated Lights Out 5 Firmware
Integrated Lights Out 4 Firmware
Configuration A
1 vulnerable · 18 platform
Vulnerable SoftwareAffected Versions
Integrated Lights Out 5 Firmware
Up to 1.39
Running on/withPlatform Versions
Hp
Proliant Bl460c Gen10
All versions
Hp
Proliant Dl120 Gen10
All versions
Hp
Proliant Dl160 Gen10
All versions
Hp
Proliant Dl180 Gen10
All versions
Hp
Proliant Dl20 Gen10
All versions
Hp
Proliant Dl325 Gen10
All versions
Hp
Proliant Dl360 Gen10
All versions
Hp
Proliant Dl380 Gen10
All versions
Hp
Proliant Dl385 Gen10
All versions
Hp
Proliant Dl560 Gen10
All versions
Hp
Proliant Dl580 Gen10
All versions
Hp
Proliant Microserver Gen10
All versions
Hp
Proliant Ml110 Gen10
All versions
Hp
Proliant Ml350 Gen10
All versions
Hp
Proliant Xl170r Gen10
All versions
Hp
Proliant Xl190r Gen10
All versions
Hp
Proliant Xl230k Gen10
All versions
Hp
Proliant Xl450 Gen10
All versions
Configuration B
1 vulnerable · 19 platform
Vulnerable SoftwareAffected Versions
Integrated Lights Out 4 Firmware
Up to 2.61b
Running on/withPlatform Versions
Hp
Proliant Bl460c Gen9
All versions
Hp
Proliant Dl120 Gen9
All versions
Hp
Proliant Dl180 Gen9
All versions
Hp
Proliant Dl360 Gen9
All versions
Hp
Proliant Dl380 Gen9
All versions
Hp
Proliant Dl580 Gen9
All versions
Hp
Proliant Ml10 Gen9
Version 2
Hp
Proliant Ml110 Gen9
All versions
Hp
Proliant Ml150 Gen9
All versions
Hp
Proliant Ml30 Gen9
Version 2
Hp
Proliant Ml350 Gen9
All versions
Hp
Proliant Ws460c Gen9
All versions
Hp
Proliant Xl170r Gen9
All versions
Hp
Proliant Xl190r Gen9
All versions
Hp
Proliant Xl230a Gen9
All versions
Hp
Proliant Xl250a Gen9
All versions
Hp
Proliant Xl730f Gen9
All versions
Hp
Proliant Xl740f Gen9
All versions
Hp
Proliant Xl750f Gen9
All versions

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.