Lucene search

K
cvelistHpeCVELIST:CVE-2023-28083
HistoryMar 20, 2023 - 12:34 p.m.

CVE-2023-28083 Potential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).

2023-03-2012:34:16
CWE-79
hpe
www.cve.org
cve-2023-28083
cross-site scripting
hpe integrated lights-out

8.3 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

8.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Integrated Lights-Out",
    "vendor": "HPE",
    "versions": [
      {
        "lessThan": "1.20",
        "status": "affected",
        "version": "Integrated Lights-Out 6 (iLO 6)",
        "versionType": "1.20"
      },
      {
        "lessThan": "2.78",
        "status": "affected",
        "version": "Integrated Lights-Out 5 (iLO 5) ",
        "versionType": "2.78"
      },
      {
        "lessThan": "2.82",
        "status": "affected",
        "version": "Integrated Lights-Out 4 (iLO 4)",
        "versionType": "2.82"
      }
    ]
  }
]

8.3 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

8.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

Related for CVELIST:CVE-2023-28083