CVE-2018-7117

6.1MEDIUM

Key Information:

Vendor
HP
Status
HP Integrated Lights-out 5 (ilo 5) For HP Gen10 Servers
Vendor
CVE Published:
9 April 2019

Summary

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.

Affected Version(s)

HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers iLO5 prior to v1.40

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_MISC
https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.