Lucene search

[email protected]NVD:CVE-2019-11982

HistoryJun 05, 2019 - 5:29 p.m.

CVE-2019-11982

2019-06-0517:29:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

54.6%

JSON

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Affected configurations

Nvd

Node

hpintegrated_lights-out_5_firmwareRange≤1.39

AND

hpproliant_bl460c_gen10Match-

hpproliant_dl120_gen10Match-

hpproliant_dl160_gen10Match-

hpproliant_dl180_gen10Match-

hpproliant_dl20_gen10Match-

hpproliant_dl325_gen10Match-

hpproliant_dl360_gen10Match-

hpproliant_dl380_gen10Match-

hpproliant_dl385_gen10Match-

hpproliant_dl560_gen10Match-

hpproliant_dl580_gen10Match-

hpproliant_microserver_gen10Match-

hpproliant_ml110_gen10Match-

hpproliant_ml350_gen10Match-

hpproliant_xl170r_gen10Match-

hpproliant_xl190r_gen10Match-

hpproliant_xl230k_gen10Match-

hpproliant_xl450_gen10Match-

Node

hpintegrated_lights-out_4_firmwareRange≤2.61b

AND

hpproliant_bl460c_gen9Match-

hpproliant_dl120_gen9Match-

hpproliant_dl180_gen9Match-

hpproliant_dl360_gen9Match-

hpproliant_dl380_gen9Match-

hpproliant_dl580_gen9Match-

hpproliant_ml10_gen9Match2

hpproliant_ml110_gen9Match-

hpproliant_ml150_gen9Match-

hpproliant_ml30_gen9Match2

hpproliant_ml350_gen9Match-

hpproliant_ws460c_gen9Match-

hpproliant_xl170r_gen9Match-

hpproliant_xl190r_gen9Match-

hpproliant_xl230a_gen9Match-

hpproliant_xl250a_gen9Match-

hpproliant_xl730f_gen9

hpproliant_xl740f_gen9Match-

hpproliant_xl750f_gen9Match-

VendorProductVersionCPE
hpintegrated_lights-out_5_firmware*cpe:2.3:o:hp:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*
hpproliant_bl460c_gen10-cpe:2.3:h:hp:proliant_bl460c_gen10:-:*:*:*:*:*:*:*
hpproliant_dl120_gen10-cpe:2.3:h:hp:proliant_dl120_gen10:-:*:*:*:*:*:*:*
hpproliant_dl160_gen10-cpe:2.3:h:hp:proliant_dl160_gen10:-:*:*:*:*:*:*:*
hpproliant_dl180_gen10-cpe:2.3:h:hp:proliant_dl180_gen10:-:*:*:*:*:*:*:*
hpproliant_dl20_gen10-cpe:2.3:h:hp:proliant_dl20_gen10:-:*:*:*:*:*:*:*
hpproliant_dl325_gen10-cpe:2.3:h:hp:proliant_dl325_gen10:-:*:*:*:*:*:*:*
hpproliant_dl360_gen10-cpe:2.3:h:hp:proliant_dl360_gen10:-:*:*:*:*:*:*:*
hpproliant_dl380_gen10-cpe:2.3:h:hp:proliant_dl380_gen10:-:*:*:*:*:*:*:*
hpproliant_dl385_gen10-cpe:2.3:h:hp:proliant_dl385_gen10:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	integrated_lights-out_5_firmware	*	cpe:2.3:o:hp:integrated_lights-out_5_firmware::::::::
hp	proliant_bl460c_gen10	-	cpe:2.3:h:hp:proliant_bl460c_gen10:-:::::::*
hp	proliant_dl120_gen10	-	cpe:2.3:h:hp:proliant_dl120_gen10:-:::::::*
hp	proliant_dl160_gen10	-	cpe:2.3:h:hp:proliant_dl160_gen10:-:::::::*
hp	proliant_dl180_gen10	-	cpe:2.3:h:hp:proliant_dl180_gen10:-:::::::*
hp	proliant_dl20_gen10	-	cpe:2.3:h:hp:proliant_dl20_gen10:-:::::::*
hp	proliant_dl325_gen10	-	cpe:2.3:h:hp:proliant_dl325_gen10:-:::::::*
hp	proliant_dl360_gen10	-	cpe:2.3:h:hp:proliant_dl360_gen10:-:::::::*
hp	proliant_dl380_gen10	-	cpe:2.3:h:hp:proliant_dl380_gen10:-:::::::*
hp	proliant_dl385_gen10	-	cpe:2.3:h:hp:proliant_dl385_gen10:-:::::::*

Rows per page:

1-10 of 391

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03917en_us

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

54.6%

JSON

Related for NVD:CVE-2019-11982

cvelist1 cve1 prion1 nessus1