CVE-2021-29205

🗓️ 25 May 2021 13:37:43Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 42 Views

Remote xss vulnerability in HPE iLO 4, iLO 5, SimpliVit

Reporter	Title	Published	Views	Family All 7
CNNVD	多款Hewlett Packard Enterprise产品跨站脚本漏洞	19 May 202100:00	–	cnnvd
Cvelist	CVE-2021-29205	25 May 202113:37	–	cvelist
EUVD	EUVD-2021-15844	7 Oct 202500:30	–	euvd
NVD	CVE-2021-29205	25 May 202114:15	–	nvd
Prion	Remote file inclusion	25 May 202114:15	–	prion
RedhatCVE	CVE-2021-29205	22 May 202518:29	–	redhatcve
Tenable Nessus	HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29205)	13 Nov 202500:00	–	nessus

NVD

Node

hp integrated_lights-out_4Range<2.78

AND

hp simplivity_380_gen9Match-

Node

hp integrated_lights-out_5Range<2.44

AND

hp proliant_bl460c_gen10_server_bladeMatch-

hp proliant_dl120_gen10_serverMatch-

hp proliant_dl160_gen10_serverMatch-

hp proliant_dl180_gen10_serverMatch-

hp proliant_dl20_gen10_serverMatch-

hp proliant_dl325_gen10_plus_serverMatch-

hp proliant_dl325_gen10_serverMatch-

hp proliant_dl360_gen10_serverMatch-

hp proliant_dl380_gen10_serverMatch-

hp proliant_dl385_gen10_plus_serverMatch-

hp proliant_dl385_gen10_serverMatch-

hp proliant_dl560_gen10_serverMatch-

hp proliant_dl580_gen10_serverMatch-

hp proliant_ml110_gen10_serverMatch-

hp proliant_ml30_gen10_serverMatch-

hp proliant_ml350_gen10_serverMatch-

hp proliant_xl170r_gen10_serverMatch-

hp proliant_xl190r_gen10_serverMatch-

hp proliant_xl230k_gen10_serverMatch-

hp proliant_xl270d_gen10_serverMatch-

hp proliant_xl450_gen10_serverMatch-

hp simplivity_2600Match-

hp simplivity_325Match-

hp simplivity_380_gen10Match-

hp simplivity_380_gen10_gMatch-

hp simplivity_380_gen10_hMatch-

[
  {
    "product": "HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to HPE Integrated Lights-Out 4 (iLO 4) version 2.78"
      },
      {
        "status": "affected",
        "version": "Prior to HPE Integrated Lights-Out 5 (iLO 5) version 2.44"
      },
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 06:00Current

5.1Medium risk

Vulners AI Score5.1

CVSS 23.5

CVSS 3.14.8

EPSS0.00236

CWE-79