Hp Integrated Lights Out 4 vulnerabilities, page 2

31 vulnerabilities

Known vulnerabilities in Hp Integrated Lights Out 4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2016-4406hewlett packard enterprisehp integrated lights-out 3 (ilo 3), hpe integrated lights-out 4 (ilo 4)+2
EPSS score
2.57%
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.
9.8CVE-2016-4375hpintegrated_lights-out_3_firmware+2
EPSS score
3.00%
Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
5.3CVE-2020-7202hpintegrated_lights-out_4_firmware+1
EPSS score
1.49%
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.
10CVE-2014-7876hpintegrated_lights-out_2_firmware+2
EPSS score
12.80%
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.
7.5CVE-2022-23704hpintegrated_lights-out_4_firmware
EPSS score
1.95%
A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.
9.3CVE-2012-3271hpintegrated_lights-out_3_firmware+1
EPSS score
5.09%
Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integrated Lights-Out 4 (aka iLO4) with firmware before 1.13 allows remote attackers to obtain sensitive information via unknown vectors.
10CVE-2017-12542hewlett packard enterpriseintegrated lights-out 4 (ilo 4)+1
EPSS score
99.29%
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.
6.5CVE-2017-12543hewlett packard enterpriseintegrated lights-out 4+4
EPSS score
1.45%
A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found.
8.3CVE-2019-11983hpintegrated_lights-out_4_firmware+1
EPSS score
1.10%
A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
8.3CVE-2019-11982hpintegrated_lights-out_4_firmware+1
EPSS score
2.09%
A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
8.3CVE-2023-28083hpintegrated_lights-out_4_firmware+3
EPSS score
0.45%
A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.