CVE-2023-28083: A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4…

medium5.4CVSS 3.1

AVNACLPRLUIRSCCLILAN

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
hp	integrated_lights-out_4	< 2.82	2.82
hp	integrated_lights-out_5	< 2.78	2.78
hp	integrated_lights-out_6	< 1.20	1.20
hpe	integrated_lights-out	>= Integrated Lights-Out 4 (iLO 4) < 2.82	2.82
hpe	integrated_lights-out	>= Integrated Lights-Out 5 (iLO 5) < 2.78	2.78
hpe	integrated_lights-out	>= Integrated Lights-Out 6 (iLO 6) < 1.20	1.20