Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hpe Subscribe
Filtered by product Integrated Lights-out
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-23701 1 Hpe 2 Integrated Lights-out, Integrated Lights-out 4 2022-03-08 5.0 MEDIUM 5.3 MEDIUM
A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60. This vulnerability could be remotely exploited to allow an attacker to supply invalid input to the iLO 4 webserver, causing it to respond with a redirect to an attacker-controlled domain. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 4 (iLO 4).