IL
Product
Integrated Lights-out 4 Firmware
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 3Low 0
Watch
Add Integrated Lights-out 4 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12542 | 10.0 | Feb 15 | A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found Affected: before 2.53 |
| CVE-2016-4375 | 9.8 | Sep 8 | Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated… Affected: 2.43 |
| CVE-2018-7093 | 8.6 | Aug 14 | A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot… Affected: before 2.60 |
| CVE-2019-11982 | 8.3 | Jun 5 | A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for… Affected: through 2.61b |
| CVE-2018-7101 | 7.5 | Sep 27 | A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30 Affected: before 2.60 |
| CVE-2018-7105 | 7.2 | Sep 27 | A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out… Affected: before 2.61 |
| CVE-2018-7078 | 7.2 | Aug 6 | A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30 Affected: before 2.60 |
| CVE-2019-11983 | 7.0 | Jun 5 | A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10… Affected: through 2.61b |
| CVE-2017-12543 | 6.5 | Feb 15 | A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found Affected: before 2.53 |
| CVE-2016-4406 | 6.1 | Aug 6 | A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44 Affected: before 2.44 |
| CVE-2018-7112 | 5.5 | Dec 3 | The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information Affected: before 2.60 |
| CVE-2015-5435 | – | Sep 30 | Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 3 before 1.85 and 4 before 2.22 allows remote authenticated users to cause a denial of service via unknown… Affected: through 2.20 |
| CVE-2015-2106 | – | Mar 31 | Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions… Affected: through 2.03 |
| CVE-2014-7876 | – | Mar 31 | Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers… Affected: through 2.01 |
| CVE-2013-2338 | – | Jun 14 | Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is… Affected: through 1.20; 1.11; 1.13 |
| CVE-2012-3271 | – | Nov 29 | Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integrated Lights-Out 4 (aka iLO4) with firmware before 1.13 allows remote… Affected: through 1.11; 1.05; 1.10 |
Showing 16