CVE-2016-4406

MEDIUM

HPE iLO <1.88-<2.44 - XSS

Title source: llm

A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.

Core 3

Core References

Vendor Advisory x_refsource_confirm

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 6.1

EPSS 0.0053

EPSS Percentile 67.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

hp/integrated_lights-out_3_firmware < 1.88

hp/integrated_lights-out_4_firmware < 2.44

Published Aug 06, 2018

Tracked Since Feb 18, 2026