Vulnerabilities > HP > Integrated Lights OUT 5 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-12-12 CVE-2021-46846 Cross-site Scripting vulnerability in HP Integrated Lights-Out 5 Firmware 1.30/1.37/1.40
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.
network
low complexity
hp CWE-79
6.1
2019-04-09 CVE-2018-7117 Cross-site Scripting vulnerability in HP Integrated Lights-Out 5 Firmware 1.30/1.37
A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.
network
low complexity
hp CWE-79
6.1
2018-12-03 CVE-2018-7113 Unspecified vulnerability in HP Integrated Lights-Out 5 Firmware 1.30
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates.
low complexity
hp
6.6