CVE-2021-29210

🗓️ 25 May 2021 14:11:03Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 47 Views

Remote dom xss, crlf injection vuln. in HPE Integrated Lights-Out 4/5, SimpliVity 380/2600/380 Gen9/10 (v2.78)

Reporter	Title	Published	Views	Family All 7
CNNVD	多款 Hewlett Packard Enterprise 产品注入漏洞	19 May 202100:00	–	cnnvd
Cvelist	CVE-2021-29210	25 May 202114:11	–	cvelist
EUVD	EUVD-2021-15849	7 Oct 202500:30	–	euvd
NVD	CVE-2021-29210	25 May 202115:15	–	nvd
Prion	Crlf injection	25 May 202115:15	–	prion
RedhatCVE	CVE-2021-29210	22 May 202521:24	–	redhatcve
Tenable Nessus	HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29210)	13 Nov 202500:00	–	nessus

NVD

Node

hp integrated_lights-out_4Range<2.78

AND

hp simplivity_380_gen9Match-

Node

hp integrated_lights-out_5Range<2.44

AND

hp proliant_bl460c_gen10_server_bladeMatch-

hp proliant_dl120_gen10_serverMatch-

hp proliant_dl160_gen10_serverMatch-

hp proliant_dl180_gen10_serverMatch-

hp proliant_dl20_gen10_serverMatch-

hp proliant_dl325_gen10_plus_serverMatch-

hp proliant_dl325_gen10_serverMatch-

hp proliant_dl360_gen10_serverMatch-

hp proliant_dl380_gen10_serverMatch-

hp proliant_dl385_gen10_plus_serverMatch-

hp proliant_dl385_gen10_serverMatch-

hp proliant_dl560_gen10_serverMatch-

hp proliant_dl580_gen10_serverMatch-

hp proliant_ml110_gen10_serverMatch-

hp proliant_ml30_gen10_serverMatch-

hp proliant_ml350_gen10_serverMatch-

hp proliant_xl170r_gen10_serverMatch-

hp proliant_xl190r_gen10_serverMatch-

hp proliant_xl230k_gen10_serverMatch-

hp proliant_xl270d_gen10_serverMatch-

hp proliant_xl450_gen10_serverMatch-

hp simplivity_2600Match-

hp simplivity_325Match-

hp simplivity_380_gen10Match-

hp simplivity_380_gen10_gMatch-

hp simplivity_380_gen10_hMatch-

[
  {
    "product": "HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to HPE Integrated Lights-Out 4 (iLO 4) version 2.78"
      },
      {
        "status": "affected",
        "version": "Prior to HPE Integrated Lights-Out 5 (iLO 5) version 2.44"
      },
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 06:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 23.5

CVSS 3.14.8

EPSS0.00205