CVE-2013-4842

2013-11-1803:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-4842

cross-site scripting

xss

hp integrated lights-out 4

ilo4

firmware

remote attack

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.1%

JSON

Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
hp:integrated_lights-out_firmwarehp integrated lights-out firmwarele1.27a
hp:integrated_lights-out_firmwarehp integrated lights-out firmwareeq1.10
hp:integrated_lights-out_firmwarehp integrated lights-out firmwareeq1.15
hp:integrated_lights-out_firmwarehp integrated lights-out firmwareeq1.15a
hp:integrated_lights-out_firmwarehp integrated lights-out firmwareeq1.16a
hp:integrated_lights-out_firmwarehp integrated lights-out firmwareeq1.20a
hp:integrated_lights-out_firmwarehp integrated lights-out firmwareeq1.26a
hp:integrated_lights-out_4hp integrated lights-out 4eq-

CPE	Name	Operator	Version
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	le	1.27a
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	eq	1.10
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	eq	1.15
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	eq	1.15a
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	eq	1.16a
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	eq	1.20a
hp:integrated_lights-out_firmware	hp integrated lights-out firmware	eq	1.26a
hp:integrated_lights-out_4	hp integrated lights-out 4	eq	-