hpe Vulnerabilities and Affected Products
Vulnerabilities associated with Integrated Lights-Out.
Products
Clear product- edgeconnect_sd-wan_orchestrator14 vulnerabilities
- insight_remote_support5 vulnerabilities
- HPE System Management Homepage before v7.64 vulnerabilities
- arba_access_points_running_instantos_and_arubaos_103 vulnerabilities
- aruba_clear_pass_policy_manager3 vulnerabilities
- aruba_networking_instantos1 vulnerability
- arubaos1 vulnerability
- cray_system_management_software1 vulnerability
- HPE Business Critical Hard Drives1 vulnerability
- HPE enhanced Internet Usage Manager (eIUM)1 vulnerability
- HPE MSE Msg Gw application E-LTU1 vulnerability
- HPE NVMe Mixed Use Solid State Drives1 vulnerability
- HPE SATA Read Intensive Solid State Drives1 vulnerability
- HPE Server Enterprise Hard Drives1 vulnerability
- HPE Server SAS Hard Drives1 vulnerability
- HPE Server SATA Hard Drives1 vulnerability
- HPE Server Solid State Drives1 vulnerability
- HPE Service Pack for ProLiant1 vulnerability
- HPE Superdome Flex Server1 vulnerability
- HPE System Management Homepage (SMH)1 vulnerability
- HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy1 vulnerability
- hpe_athonet_mobile_care1 vulnerability
- Integrated Lights-Out1 vulnerability
- NetBatch-Plus software1 vulnerability
- NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-28083HIGH | Potential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out. CWE-79Mar 20, 2023 | CVSS8.3v3.1 | EPSS0.445% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |