CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
24.8%
A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.
Vendor | Product | Version | CPE |
---|---|---|---|
hp | integrated_lights-out_5_firmware | * | cpe:2.3:o:hp:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:* |
hp | proliant_bl460c_gen10 | - | cpe:2.3:h:hp:proliant_bl460c_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl120_gen10 | - | cpe:2.3:h:hp:proliant_dl120_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl160_gen10 | - | cpe:2.3:h:hp:proliant_dl160_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl180_gen10 | - | cpe:2.3:h:hp:proliant_dl180_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl20_gen10 | - | cpe:2.3:h:hp:proliant_dl20_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl325_gen10 | - | cpe:2.3:h:hp:proliant_dl325_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl360_gen10 | - | cpe:2.3:h:hp:proliant_dl360_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl380_gen10 | - | cpe:2.3:h:hp:proliant_dl380_gen10:-:*:*:*:*:*:*:* |
hp | proliant_dl385_gen10 | - | cpe:2.3:h:hp:proliant_dl385_gen10:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
24.8%