Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2743▼ 518 respecto a la semana anterior
Críticas / altas1293▼ 226 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
64 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.8) | 0.51% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s):… | |
| Modificada | Media (4.8) | 0.51% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s):… | |
| Modificada | Media (4.8) | 0.65% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version… | |
| Modificada | Media (4.8) | 0.65% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version… | |
| Modificada | Media (4.8) | 0.65% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version… | |
| Modificada | Media (4.8) | 0.65% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version… | |
| Modificada | Media (6.7) | 0.29% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to… | |
| Modificada | Media (4.8) | 0.69% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 25/5/2021 | 17/6/2026 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version… | |
| Modificada | Media (6.1) | 0.62% | — | HPE Integrated Lights-out Amplifier | 1/4/2021 | 17/6/2026 | A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or later. | |
| Modificada | Media (5.3) | 1.5% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5 | 5/1/2021 | 17/6/2026 | A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information. | |
| Modificada | Alta (7) | 1.1% | — | HP Integrated Lights-out 5 FirmwareHP Integrated Lights-out 4 Firmware | 5/6/2019 | 17/6/2026 | A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39. | |
| Modificada | Alta (8.3) | 2.1% | — | HP Integrated Lights-out 5 FirmwareHP Integrated Lights-out 4 Firmware | 5/6/2019 | 17/6/2026 | A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39. | |
| Modificada | Media (6.1) | 1.3% | — | HP Integrated Lights-out 5 Firmware | 9/4/2019 | 17/6/2026 | A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40. | |
| Modificada | Media (6.6) | 0.74% | — | HP Integrated Lights-out 5 Firmware | 3/12/2018 | 17/6/2026 | A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates. | |
| Modificada | Media (5.5) | 0.67% | — | HP Integrated Lights-out 2 FirmwareHP Integrated Lights-out 3 FirmwareHP Integrated Lights-out 4 FirmwareHP Proliant Xl750f Gen9 Server Firmware+97 | 3/12/2018 | 17/6/2026 | The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the… | |
| Modificada | Alta (7.2) | 4.1% | — | HP Integrated Lights-out 5 FirmwareHP Integrated Lights-out 3 FirmwareHP Integrated Lights-out 4 Firmware | 27/9/2018 | 17/6/2026 | A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information. | |
| Modificada | Alta (7.5) | 7.1% | — | HP Integrated Lights-out 4 FirmwareHP Integrated Lights-out 5 Firmware | 27/9/2018 | 17/6/2026 | A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30. | |
| Modificada | Alta (8.6) | 3.5% | — | HP Integrated Lights-out 3 FirmwareHP Integrated Lights-out 4 FirmwareHP Integrated Lights-out 5 FirmwareHP Moonshot Chassis Manager Firmware+1 | 14/8/2018 | 17/6/2026 | A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service. | |
| Modificada | Alta (7.2) | 6.8% | — | HP Integrated Lights-out 4 FirmwareHP Integrated Lights-out 5 Firmware | 6/8/2018 | 17/6/2026 | A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30. | |
| Modificada | Alta (8.6) | 6.2% | — | HP Integrated Lights-out 3 Firmware | 6/8/2018 | 17/6/2026 | A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions. | |
| Modificada | Media (6.1) | 2.6% | — | HP Integrated Lights-out 3 FirmwareHP Integrated Lights-out 4 Firmware | 6/8/2018 | 17/6/2026 | A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44. | |
| Modificada | Crítica (9.8) | 4.8% | — | HP Integrated Lights-out 2 Firmware | 15/2/2018 | 17/6/2026 | Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass, code execution, and denial of service. | |
| Modificada | Media (6.5) | 1.4% | — | HP Moonshot Remote Console AdministratorHP Integrated Lights-out 2 FirmwareHP Integrated Lights-out 3 FirmwareHP Integrated Lights-out 4 Firmware | 15/2/2018 | 17/6/2026 | A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found. | |
| Modificada | Crítica (10) | 99% | 💥 Exploit | HP Integrated Lights-out 4 Firmware | 15/2/2018 | 17/6/2026 | A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. | |
| Modificada | Alta (7.5) | 1.6% | — | HP Integrated Lights-out Firmware | 11/5/2017 | 17/6/2026 | A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service (DoS). Note this was originally published in 2015 however the CVE entry was added in… |