Vulnerability Details CVE-2013-4842
Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.1%
CVSS Severity
CVSS v2 Score 4.3
References
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804
Products affected by CVE-2013-4842
-
cpe:2.3:h:hp:integrated_lights-out_4:-
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.05
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.10
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.15
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.15a
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.16a
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.20a
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.26a
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.27a
-
cpe:2.3:o:hp:integrated_lights-out_firmware:1.6a