HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29204)

"A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504406; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/11/13"; scriptcveid"CVE-2021-29204";...

CVE-2021-29204

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29204

CVE-2021-29204 is a remote cross‑site scripting (XSS) vulnerability affecting multiple Hewlett Packard Enterprise products: HPE Integrated Lights-Out 4 (iLO 4), iLO 5 for Gen10 servers, and HPE SimpliVity models (380 Gen9/Gen10, 2600, 325, 380 Gen10 H, etc.). The root cause is improper neutraliza...