CVE-2023-30911

CVE-2023-30911 affects HPE Integrated Lights-Out 5 and 6 when using iLOrest, with the documented impact being a potential denial of service. Multiple connected sources (including a Nessus plugin and RH/NVD entries) corroborate that the issue is observed on these iLO variants and is described as a...

CVE-2023-28083

The CVE-2023-28083 vulnerability affects HPE Integrated Lights-Out (iLO) 4, 5, and 6. It is described as a remote Cross-site Scripting (XSS) issue arising from improper neutralization of input during web page generation. Impacted components are the iLO web interfaces, enabling attacker-supplied i...

CVE-2023-28083: Improper Neutralization of Input During Web Page Generation

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 iLO 6, Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4. HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out...

kernel security, bug fix, and enhancement update

4.18.0-425.3.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CVE-2021-46846

HP Integrated Lights-Out 5 (iLO 5) suffers a Cross Site Scripting (XSS) vulnerability in the web interface caused by improper input handling during page generation. Exploitation could occur in authenticated contexts and potentially lead to script execution within a user’s session; CVSS metrics in...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2022-28639

A remote potential adjacent denial of service DoS and potential adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise h...

CVE-2022-28637

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...

CVE-2022-28638

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise h...

CVE-2022-28637

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...

CVE-2022-28638

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise h...

CVE-2022-28640

A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated...

Remote code execution

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise h...

Remote code execution

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...

CVE-2022-28637

CVE-2022-28637 : A local DoS and local arbitrary code execution vulnerability exists in Hewlett Packard Enterprise’s HPE Integrated Lights-Out 5 (iLO 5) version 2.71. The underlying issue is described as improper input validation, enabling local exploitation that could impact confidentiality, int...

CVE-2022-28637

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...

CVE-2022-28639

CVE-2022-28639 concerns HP iLO 5, affected in version 2.71. The vulnerability is described as a remote, adjacent DoS with potential adjacent arbitrary code execution that could impact confidentiality, integrity, and availability. HP has provided updated firmware to address these vulnerabilities. ...

CVE-2022-28638

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise h...

CVE-2022-28638

CVE-2022-28638 affects HP Integrated Lights-Out 5 (iLO 5) versions up to 2.71. The issue is described as an isolated local disclosure of information and potential local arbitrary code execution, potentially impacting confidentiality, integrity, and availability. Hewlett Packard Enterprise has iss...