CVE-2021-29206

CVE-2021-29206: A remote cross-site scripting (XSS) vulnerability affects HPE Integrated Lights-Out 4 (iLO 4), HPE SimpliVity 380 Gen9/Gen10 variants, iLO 5 for Gen10 servers, and related SimpliVity models. The root cause is improper input handling during web page generation, leading to potential...

CVE-2021-29202

A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H...

CVE-2021-29202

The CVE-2021-29202 entries identify a local buffer overflow in Hewlett Packard Enterprise products: HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for Gen10 servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE S...

CVE-2021-29201

CVE-2021-29201 is an XSS vulnerability in HPE Integrated Lights-Out products (iLO 4, iLO 5 for Gen10, and related HP SimpliVity systems) caused by improper neutralization of input during web page generation. Affected versions are iLO 4, iLO 5 Gen10, and related SimpliVity models prior to version ...

CVE-2021-29201

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

RHEL 8 : kernel (RHSA-2021:2106)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in eventpoll.c...

HPESBHF04144 rev.1 - HPE StoreOnce Systems using HPE Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 2700 8TB Backup - Prior to 3.18.20 HPE StoreOnce 2900 24TB Backup - Prior to 3.18.20 HPE...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5, among others, is a product of Hewlett Packard Enterprise HPE in the U.S. Hewlett Packard Enterprise Integrated Lights-Out 5 is a remote control solution. Out 5 is a remote control solution. Hewlett Packard Enterprise HPE Orchestrator is a...

多款Hewlett Packard Enterprise产品安全漏洞

Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4, etc. are products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 is a remote control solution. Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution. Hewlett Packard...

RHEL 7 : kpatch-patch (RHSA-2021:1532)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1532 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

HPE iLO Amplifier Pack Remote Code Execution Vulnerability

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

CVE-2021-26583

A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution...

CVE-2021-26583

A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution...

Remote code execution

A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution...

CVE-2021-26583

The CVE-2021-26583 entry concerns HPE iLO Amplifier Pack and is corroborated by multiple connected sources indicating a remote code execution vulnerability in versions prior to 1.90. The vulnerability allows a remote attacker to execute arbitrary code on affected systems; no exploitation details ...

CVE-2021-26583

A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution...

RHEL 7 : kpatch-patch (RHSA-2021:1377)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1377 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

CVE-2021-26580

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS. HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or...

CVE-2021-26580

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS. HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or...