CVE-2021-29204

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29206

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29211

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29211

CVE-2021-29211 affects multiple HPE products, including HPE Integrated Lights-Out 4 (iLO 4), iLO 5 for Gen10 servers, and related SimpliVity offerings. The issue is a remote cross-site scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected ve...

CVE-2021-29207

CVE-2021-29207 affects Hewlett Packard Enterprise products with remote XSS in HPE Integrated Lights-Out 4 (iLO 4), iLO 5 for Gen10 servers, and various HPE SimpliVity platforms. The vulnerability is described as Improper Neutralization of Input During Web Page Generation (remote XSS). Affected ve...

CVE-2021-29207

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29206

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29206

CVE-2021-29206: A remote cross-site scripting (XSS) vulnerability affects HPE Integrated Lights-Out 4 (iLO 4), HPE SimpliVity 380 Gen9/Gen10 variants, iLO 5 for Gen10 servers, and related SimpliVity models. The root cause is improper input handling during web page generation, leading to potential...

CVE-2021-29205

The CVE-2021-29205 entry describes a remote cross-site scripting (XSS) vulnerability in Hewlett Packard Enterprise products: iLO 4, iLO 5 for Gen10, and related HPE SimpliVity/Gen9/Gen10 models (e.g., 380 Gen9, 380 Gen10, 380 Gen10 G, 380 Gen10 H, 325, 2600). Root cause: improper neutralization o...

CVE-2021-29204

CVE-2021-29204 is a remote cross‑site scripting (XSS) vulnerability affecting multiple Hewlett Packard Enterprise products: HPE Integrated Lights-Out 4 (iLO 4), iLO 5 for Gen10 servers, and HPE SimpliVity models (380 Gen9/Gen10, 2600, 325, 380 Gen10 H, etc.). The root cause is improper neutraliza...

CVE-2021-29201

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29201

CVE-2021-29201 is an XSS vulnerability in HPE Integrated Lights-Out products (iLO 4, iLO 5 for Gen10, and related HP SimpliVity systems) caused by improper neutralization of input during web page generation. Affected versions are iLO 4, iLO 5 Gen10, and related SimpliVity models prior to version ...

CVE-2021-29139

CVE-2021-29139 affects Aruba ClearPass Policy Manager. A remote cross-site scripting (XSS) vulnerability exists in releases prior to 6.9.5, 6.8.9, and 6.7.14-HF1. Aruba has released patches addressing this vulnerability. The issue arises from insufficient validation of client data in the web appl...

CVE-2021-25161

A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...

CVE-2020-24627

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2020-24627

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2016-4392

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

Cross site scripting

A Remote Cross-Site Scripting XSS vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found...

CVE-2017-5800

CVE-2017-5800 describes a remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics v3.0 . The issue stems from inadequate input filtering, enabling an attacker to inject and execute arbitrary HTML/JavaScript in a victim’s browser. Impact noted includes the potential thef...

CVE-2017-18085

The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the key parameter...