CVE-2021-29211

🗓️ 25 May 2021 14:11:09Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 52 Views

Remote xss vulnerability in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78

Reporter	Title	Published	Views	Family All 8
CNNVD	多款Hewlett Packard Enterprise产品跨站脚本漏洞	19 May 202100:00	–	cnnvd
Cvelist	CVE-2021-29211	25 May 202114:11	–	cvelist
EUVD	EUVD-2021-15850	7 Oct 202500:30	–	euvd
NVD	CVE-2021-29211	25 May 202115:15	–	nvd
OSV	CVE-2021-29211	25 May 202115:15	–	osv
Prion	Remote file inclusion	25 May 202115:15	–	prion
RedhatCVE	CVE-2021-29211	22 May 202519:35	–	redhatcve
Tenable Nessus	HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29211)	13 Nov 202500:00	–	nessus

NVD

Node

hp integrated_lights-out_4Range<2.78

AND

hp simplivity_380_gen9Match-

Node

hp integrated_lights-out_5Range<2.44

AND

hp proliant_bl460c_gen10_server_bladeMatch-

hp proliant_dl120_gen10_serverMatch-

hp proliant_dl160_gen10_serverMatch-

hp proliant_dl180_gen10_serverMatch-

hp proliant_dl20_gen10_serverMatch-

hp proliant_dl325_gen10_plus_serverMatch-

hp proliant_dl325_gen10_serverMatch-

hp proliant_dl360_gen10_serverMatch-

hp proliant_dl380_gen10_serverMatch-

hp proliant_dl385_gen10_plus_serverMatch-

hp proliant_dl385_gen10_serverMatch-

hp proliant_dl560_gen10_serverMatch-

hp proliant_dl580_gen10_serverMatch-

hp proliant_ml110_gen10_serverMatch-

hp proliant_ml30_gen10_serverMatch-

hp proliant_ml350_gen10_serverMatch-

hp proliant_xl170r_gen10_serverMatch-

hp proliant_xl190r_gen10_serverMatch-

hp proliant_xl230k_gen10_serverMatch-

hp proliant_xl270d_gen10_serverMatch-

hp proliant_xl450_gen10_serverMatch-

hp simplivity_2600Match-

hp simplivity_325Match-

hp simplivity_380_gen10Match-

hp simplivity_380_gen10_gMatch-

hp simplivity_380_gen10_hMatch-

[
  {
    "product": "HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to HPE Integrated Lights-Out 4 (iLO 4) version 2.78"
      },
      {
        "status": "affected",
        "version": "Prior to HPE Integrated Lights-Out 5 (iLO 5) version 2.44"
      },
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 06:00Current

5.1Medium risk

Vulners AI Score5.1

CVSS 23.5

CVSS 3.14.8

EPSS0.00236

CWE-79