CVE-2021-29206

CVE-2021-29206: A remote cross-site scripting (XSS) vulnerability affects HPE Integrated Lights-Out 4 (iLO 4), HPE SimpliVity 380 Gen9/Gen10 variants, iLO 5 for Gen10 servers, and related SimpliVity models. The root cause is improper input handling during web page generation, leading to potential...

CVE-2021-29205

The CVE-2021-29205 entry describes a remote cross-site scripting (XSS) vulnerability in Hewlett Packard Enterprise products: iLO 4, iLO 5 for Gen10, and related HPE SimpliVity/Gen9/Gen10 models (e.g., 380 Gen9, 380 Gen10, 380 Gen10 G, 380 Gen10 H, 325, 2600). Root cause: improper neutralization o...

CVE-2021-29205

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29204

CVE-2021-29204 is a remote cross‑site scripting (XSS) vulnerability affecting multiple Hewlett Packard Enterprise products: HPE Integrated Lights-Out 4 (iLO 4), iLO 5 for Gen10 servers, and HPE SimpliVity models (380 Gen9/Gen10, 2600, 325, 380 Gen10 H, etc.). The root cause is improper neutraliza...

CVE-2021-29202

A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H...

CVE-2021-29202

The CVE-2021-29202 entries identify a local buffer overflow in Hewlett Packard Enterprise products: HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for Gen10 servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE S...

CVE-2021-29201

CVE-2021-29201 is an XSS vulnerability in HPE Integrated Lights-Out products (iLO 4, iLO 5 for Gen10, and related HP SimpliVity systems) caused by improper neutralization of input during web page generation. Affected versions are iLO 4, iLO 5 Gen10, and related SimpliVity models prior to version ...

CVE-2021-29201

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

多款 Hewlett Packard Enterprise 产品注入漏洞

Hewlett Packard Enterprise Integrated Lights-Out and others are products of Hewlett Packard Enterprise USA.Hewlett Packard Enterprise Integrated Lights-Out is a a remote control solution.Hewlett Packard Enterprise SimpliVity 380 Gen 10 is a server.Hewlett Packard Enterprise SimpliVity 380 Gen 10 ...

多款 Hewlett Packard Enterprise 产品注入漏洞

Hewlett Packard Enterprise Integrated Lights-Out and others are products of Hewlett Packard Enterprise USA.Hewlett Packard Enterprise Integrated Lights-Out is a A remote control solution.Hewlett Packard Enterprise SimpliVity 380 Gen 10 is a server.Hewlett Packard Enterprise SimpliVity 380 Gen 10 ...

多款Hewlett Packard Enterprise产品注入漏洞

Hewlett Packard Enterprise Integrated Lights-Out and others are products of Hewlett Packard Enterprise USA.Hewlett Packard Enterprise Integrated Lights-Out is a a remote control solution.Hewlett Packard Enterprise SimpliVity 380 Gen 10 is a server.Hewlett Packard Enterprise SimpliVity 380 Gen 10 ...

HPESBHF04134 rev.1 - HPE SimpliVity using HPE Integrated Lights-Out 5 (iLO 5) and HPE Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to version 2.44 HPE Integrated Lights-Out 4...

HPESBST04115 rev.2 - HPE SimpliVity Systems using VMware - Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 - depends on ESXi version see HPE SimpliVity OmniStack Interoperability Guide HPE SimpliVity 2600 Gen10 - depends on ESXi version see HPE SimpliVity OmniStack...

HPESBST04094 rev.1 - HPE SimpliVity OmniStack and OmniCube, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 Gen10 - depends on ESXi version see interop guide HPE SimpliVity 380 Gen10 - depends on ESXi version see interop guide HPE SimpliVity 380 Gen10 G - depends on ESXi...

Unspecified Vulnerability in Multiple HPE Products

HPE SimpliVity 380 Gen 9 and others are a server from Hewlett Packard Enterprise HPE in the United States. A security vulnerability exists in several HPE products. An attacker could exploit the vulnerability to create and delete arbitrary files...

Unspecified Vulnerability in Multiple HPE Products (CNVD-2020-04655)

HPE SimpliVity 380 Gen 9 and others are a server from Hewlett Packard Enterprise HPE in the United States. A security vulnerability exists in several HPE products. The vulnerability can be exploited by an attacker to execute a manifest file in an arbitrary location...

CVE-2019-11993

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now...

CVE-2019-11994

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. An API is use...

Design/Logic Flaw

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now...

CVE-2019-11994

The CVE-2019-11994 issue affects HPE SimpliVity products (380 Gen 9/10, 380 Gen 10 G, 2600 Gen 10, OmniCube, OmniStack for Cisco/Lenovo/Dell). The root cause is an API that, during upgrade, does not properly prevent directory traversal, allowing unauthenticated remote execution of manifest files....