Integrated Lights-out 5 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Integrated Lights-out 5 Firmware

by HP · last CVE Dec 12, 2022

CVEs

On KEV

8.6

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 6Medium 3Low 0

Severity

All severities9 Critical0 High6 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Integrated Lights-out 5 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-7093	8.6	3%	Aug 14	A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot… Affected: before 1.30
CVE-2019-11982	8.3	2%	Jun 5	A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for… Affected: through 1.39
CVE-2018-7101	7.5	7%	Sep 27	A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30 Affected: before 1.30
CVE-2018-7105	7.2	4%	Sep 27	A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out… Affected: before 1.35
CVE-2018-7078	7.2	7%	Aug 6	A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30 Affected: before 1.30
CVE-2019-11983	7.0	1%	Jun 5	A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10… Affected: through 1.39
CVE-2018-7113	6.6	1%	Dec 3	A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates Affected: before 1.37
CVE-2021-46846	6.1	1%	Dec 12	Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5 Affected: before 2.44
CVE-2018-7117	6.1	1%	Apr 9	A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version… Affected: before 1.40