CVE-2021-29211: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29208: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29209: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29207: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29206: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

多款 Hewlett Packard Enterprise 产品注入漏洞

Hewlett Packard Enterprise Integrated Lights-Out and others are products of Hewlett Packard Enterprise USA.Hewlett Packard Enterprise Integrated Lights-Out is a A remote control solution.Hewlett Packard Enterprise SimpliVity 380 Gen 10 is a server.Hewlett Packard Enterprise SimpliVity 380 Gen 10 ...

多款 Hewlett Packard Enterprise 产品注入漏洞

Hewlett Packard Enterprise Integrated Lights-Out and others are products of Hewlett Packard Enterprise USA.Hewlett Packard Enterprise Integrated Lights-Out is a a remote control solution.Hewlett Packard Enterprise SimpliVity 380 Gen 10 is a server.Hewlett Packard Enterprise SimpliVity 380 Gen 10 ...

PT-2021-18120

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

HPESBHF04121 rev.1 - HPE ProLiant Servers, Apollo Products, and Storage Products with Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to version 2.78 HPE ProLiant BL460c Gen9 Server Blade - Prior to...

CVE-2021-25138

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice uploadsshkey function...

CVE-2021-25133

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setradiusconfigfunc...

CVE-2021-25136

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice...

CVE-2021-25130

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setactdirfunc function...

Path traversal

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice deletevideofunc function path traversal...

Path traversal

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice getvideodatafunc function path traversal...

Buffer overflow

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setfwimagelocationfunc...

CVE-2021-25135

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setsmtpfunc function...

CVE-2021-25132

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setmediaconfigfunc...

CVE-2021-25136

The CVE covers a local buffer overflow in the BMC firmware of HPE Cloudline servers (CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, CL3100 Gen10). The vulnerability arises in the spx_restservice setsolvideoremotestorage_func, affecting the Baseboard Management Controller (BMC) firmware. Public exp...

CVE-2021-25135

CVE-2021-25135 affects the BMC firmware in HPE Cloudline models CL5800 (Gen9 and Gen10), CL5200 Gen9, CL4100 Gen10, CL3100 Gen10. The vulnerability is a local buffer overflow in the spx_restservice setsmtp_func function. CVSS metrics indicate HIGH impact ( Confidentiality, Integrity, Availability...