« Volver al listado

CVE-2018-7117

Estado: ModificadaMedia (6.1)—

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Integrated Lights-out 5 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-7117",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers",
          "versions": [
            {
              "status": "affected",
              "version": "iLO5 prior to v1.40"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-04-09T19:29:01.633",
  "references": [
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03907en_us",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03917en_us",
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03907en_us",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03917en_us",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40."
    },
    {
      "lang": "es",
      "value": "Se identificó una vulnerabilidad del tipo remote cross-site scripting en la Web User Interface de HPE iLO 5 en HPE Integrated Lights-Out 5 (iLO 5) para los servidores ProLiant Gen10 anteriores a la versión v1.40."
    }
  ],
  "lastModified": "2026-06-17T02:02:41.727",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0694839-C434-4390-ABBD-A64A4CE3773C",
              "versionEndExcluding": "1.40"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:proliant_bl460c_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BFEC03C5-6E25-47A3-9793-D411056F5D08"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl120_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "43D747DD-AF47-4B5A-B9CC-20BEC97E7788"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl160_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7B0DEA2A-F511-4111-8B33-B029E75D56BF"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl180_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5077B450-1E11-4338-8F76-E4257FBE9260"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl20_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A66883DD-061A-4D0A-A73B-3EF2F7273B83"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl325_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E013812C-A291-4F5E-BA62-B034FA8288ED"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl360_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "45369573-58FC-40E2-8124-08CDEAB6B6C0"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl380_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1F5D074B-079C-4227-A2A5-654BB35E7DC3"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl385_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F0766C25-5149-4A02-BC12-38D21EAE2303"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl560_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D894E6C9-D248-4800-A138-CD0FE8F6B5B9"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_dl580_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8FEBB303-F21A-47FF-9D79-5CBC90144782"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_microserver_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2D8F597A-DBF1-4CA5-9B10-990571E2A968"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_ml110_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DA54BDB5-28DF-46D6-8D7D-F2F4F3B21381"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_ml30_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EFE18D61-BC0A-414F-A099-549D203C4EBE"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_ml350_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7FF6A55B-05B4-4286-BF06-45D2A21EF58F"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_xl170r_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A6662F50-79E8-4675-ABAB-E95C7B8A2BBB"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_xl190r_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0D33F488-C5DB-40A7-BCAB-4DA1A6FC0096"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_xl230k_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "85739B50-AA18-4097-8EAA-3A750EE38AE6"
            },
            {
              "criteria": "cpe:2.3:h:hp:proliant_xl450_gen10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2C2B30A8-303D-4A47-8D9A-7088F82D2BA3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}