Lucene search

[email protected]NVD:CVE-2023-28083

HistoryMar 22, 2023 - 6:15 a.m.

CVE-2023-28083

2023-03-2206:15:10

CWE-79

[email protected]

web.nvd.nist.gov

hpe

remote xss

security update

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

8.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.

Affected configurations

NVD

Node

hpintegrated_lights-out_4Range<2.82

AND

hpeapollo_4200_gen9_serverMatch-

hpeapollo_r2000_chassisMatch-

hpeproliant_bl420c_gen8_serverMatch-

hpeproliant_bl460c_gen8_server_bladeMatch-

hpeproliant_bl460c_gen9_server_bladeMatch-

hpeproliant_bl465c_gen8_server_bladeMatch-

hpeproliant_bl660c_gen8_server_bladeMatch-

hpeproliant_bl660c_gen9_serverMatch-

hpeproliant_dl120_gen9_serverMatch-

hpeproliant_dl160_gen8_serverMatch-

hpeproliant_dl160_gen9_serverMatch-

hpeproliant_dl180_gen9_serverMatch-

hpeproliant_dl20_gen9_serverMatch-

hpeproliant_dl320e_gen8_serverMatch-

hpeproliant_dl320e_gen8_v2_serverMatch-

hpeproliant_dl360_gen9_serverMatch-

hpeproliant_dl360e_gen8_serverMatch-

hpeproliant_dl360p_gen8_serverMatch-

hpeproliant_dl380_gen9_serverMatch-

hpeproliant_dl380e_gen8_serverMatch-

hpeproliant_dl380p_gen8_serverMatch-

hpeproliant_dl385p_gen8_\(amd\)Match-

hpeproliant_dl560_gen8_serverMatch-

hpeproliant_dl560_gen9_serverMatch-

hpeproliant_dl580_gen8_serverMatch-

hpeproliant_dl580_gen9_serverMatch-

hpeproliant_dl60_gen9_serverMatch-

hpeproliant_dl80_gen9_serverMatch-

hpeproliant_microserver_gen8Match-

hpeproliant_ml110_gen9_serverMatch-

hpeproliant_ml30_gen9_serverMatch-

hpeproliant_ml310e_gen8_serverMatch-

hpeproliant_ml310e_gen8_v2_serverMatch-

hpeproliant_ml350_gen9_serverMatch-

hpeproliant_ml350e_gen8_serverMatch-

hpeproliant_ml350e_gen8_v2_serverMatch-

hpeproliant_ml350p_gen8_serverMatch-

hpeproliant_sl210t_gen8_serverMatch-

hpeproliant_sl230s_gen8_serverMatch-

hpeproliant_sl250s_gen8_serverMatch-

hpeproliant_sl270s_gen8_se_serverMatch-

hpeproliant_sl270s_gen8_serverMatch-

hpeproliant_ws460c_gen8_graphics_server_bladeMatch-

hpeproliant_ws460c_gen9_graphics_server_bladeMatch-

hpeproliant_xl170r_gen9_serverMatch-

hpeproliant_xl190r_gen9_serverMatch-

hpeproliant_xl220a_gen8_v2_serverMatch-

hpeproliant_xl230a_gen9_serverMatch-

hpeproliant_xl230b_gen9_serverMatch-

hpeproliant_xl250a_gen9_serverMatch-

hpeproliant_xl270d_gen9_special_serverMatch-

hpeproliant_xl450_gen9_serverMatch-

hpeproliant_xl730f_gen9_serverMatch-

hpeproliant_xl740f_gen9_serverMatch-

hpeproliant_xl750f_gen9_serverMatch-

hpestoreeasy_1430_storageMatch-

hpestoreeasy_1440_storageMatch-

hpestoreeasy_1450_storageMatch-

hpestoreeasy_1530_storageMatch-

hpestoreeasy_1540_storageMatch-

hpestoreeasy_1550_storageMatch-

hpestoreeasy_1630_storageMatch-

hpestoreeasy_1640_storageMatch-

hpestoreeasy_1650_expanded_storageMatch-

hpestoreeasy_1650_storageMatch-

hpestoreeasy_1830_storageMatch-

hpestoreeasy_1840_storageMatch-

hpestoreeasy_1850_storageMatch-

hpestoreeasy_3830_gateway_storageMatch-

hpestoreeasy_3830_gateway_storage_bladeMatch-

hpestoreeasy_3840_gateway_storageMatch-

hpestoreeasy_3840_gateway_storage_bladeMatch-

hpestoreeasy_3850_gateway_single_node_upgradeMatch-

hpestoreeasy_3850_gateway_storageMatch-

hpestoreeasy_3850_gateway_storage_bladeMatch-

hpestorevirtual_3000_file_controllerMatch-

hpesynergy_480_gen9_compute_moduleMatch-

hpesynergy_620_gen9_compute_moduleMatch-

hpesynergy_660_gen9_compute_moduleMatch-

hpesynergy_680_gen9_compute_moduleMatch-

Node

hpintegrated_lights-out_5Range<2.78

AND

hpeapollo_4200_gen10_plus_systemMatch-

hpeapollo_4200_gen10_serverMatch-

hpeapollo_4510_gen10_systemMatch-

hpeapollo_6500_gen10_plus_systemMatch-

hpeapollo_6500_gen10_systemMatch-

hpeapollo_n2600_gen10_plusMatch-

hpeapollo_n2800_gen10_plusMatch-

hpeapollo_r2200_gen10Match-

hpeapollo_r2600_gen10Match-

hpeapollo_r2800_gen10Match-

hpeedgeline_e920_server_bladeMatch-

hpeedgeline_e920d_server_bladeMatch-

hpeedgeline_e920t_server_bladeMatch-

hpeproliant_bl460c_gen10_server_bladeMatch-

hpeproliant_dl120_gen10_serverMatch-

hpeproliant_dl160_gen10_serverMatch-

hpeproliant_dl180_gen10_serverMatch-

hpeproliant_dl20_gen10_plus_serverMatch-

hpeproliant_dl20_gen10_serverMatch-

hpeproliant_dl325_gen10_plus_serverMatch-

hpeproliant_dl325_gen10_serverMatch-

hpeproliant_dl345_gen10_plus_serverMatch-

hpeproliant_dl360_gen10_plus_serverMatch-

hpeproliant_dl360_gen10_serverMatch-

hpeproliant_dl365_gen10_plus_serverMatch-

hpeproliant_dl380_gen10_plus_serverMatch-

hpeproliant_dl380_gen10_serverMatch-

hpeproliant_dl385_gen10_plus_serverMatch-

hpeproliant_dl385_gen10_plus_v2_serverMatch-

hpeproliant_dl385_gen10_serverMatch-

hpeproliant_dl560_gen10_serverMatch-

hpeproliant_dl580_gen10_serverMatch-

hpeproliant_dx170r_gen10_serverMatch-

hpeproliant_dx190r_gen10_serverMatch-

hpeproliant_dx220n_gen10_plus_serverMatch-

hpeproliant_dx325_gen10_plus_v2_serverMatch-

hpeproliant_dx360_gen10_plus_serverMatch-

hpeproliant_dx360_gen10_serverMatch-

hpeproliant_dx380_gen10_plus_serverMatch-

hpeproliant_dx380_gen10_serverMatch-

hpeproliant_dx385_gen10_plus_serverMatch-

hpeproliant_dx385_gen10_plus_v2_serverMatch-

hpeproliant_dx4200_gen10_serverMatch-

hpeproliant_dx560_gen10_serverMatch-

hpeproliant_e910_server_bladeMatch-

hpeproliant_e910t_server_bladeMatch-

hpeproliant_ml110_gen10_serverMatch-

hpeproliant_ml30_gen10_plus_serverMatch-

hpeproliant_ml350_gen10_serverMatch-

hpeproliant_xl170r_gen10_serverMatch-

hpeproliant_xl190r_gen10_serverMatch-

hpeproliant_xl220n_gen10_plus_serverMatch-

hpeproliant_xl225n_gen10_plus_1u_nodeMatch-

hpeproliant_xl230k_gen10_serverMatch-

hpeproliant_xl270d_gen10_serverMatch-

hpeproliant_xl290n_gen10_plus_serverMatch-

hpeproliant_xl450_gen10_serverMatch-

hpeproliant_xl645d_gen10_plus_serverMatch-

hpeproliant_xl675d_gen10_plus_serverMatch-

hpestorage_file_controllerMatch-

hpestorage_performance_file_controllerMatch-

hpestoreeasy_1460_storageMatch-

hpestoreeasy_1560_storageMatch-

hpestoreeasy_1660_expanded_storageMatch-

hpestoreeasy_1660_performance_storageMatch-

hpestoreeasy_1660_storageMatch-

hpestoreeasy_1860_performance_storageMatch-

hpestoreeasy_1860_storageMatch-

hpesynergy_480_gen10_compute_moduleMatch-

hpesynergy_480_gen10_plus_compute_moduleMatch-

hpesynergy_660_gen10_compute_moduleMatch-

Node

hpintegrated_lights-out_6Range<1.20

AND

hpeproliant_dl320_gen11_serverMatch-

hpeproliant_dl325_gen11_serverMatch-

hpeproliant_dl345_gen11_serverMatch-

hpeproliant_dl360_gen11_serverMatch-

hpeproliant_dl365_gen11_serverMatch-

hpeproliant_dl380_gen11_serverMatch-

hpeproliant_dl385_gen11_serverMatch-

hpeproliant_ml350_gen11_serverMatch-

References

support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

8.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

Related for NVD:CVE-2023-28083

cve1 cvelist1 prion1