CVSS: 5.5EPSS: 0%CPEs: 205EXPL: 0CVE-2018-7112
https://notcve.org/view.php?id=CVE-2018-7112
03 Dec 2018 — The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in ... • http://www.securitytracker.com/id/1041984 •
CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2018-7105
https://notcve.org/view.php?id=CVE-2018-7105
27 Sep 2018 — A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information. Podría explotarse remotamente una vulnerabilidad de seguridad en HPE Integrated Lights-Out 5 (iLO 5) para servidores HPE Gen10 en versiones anteriores a la v1.35, HPE Integrated Lights-Out 4 (iLO 4) en versiones ant... • http://www.securityfocus.com/bid/105425 •
CVSS: 8.6EPSS: 0%CPEs: 7EXPL: 0CVE-2018-7093
https://notcve.org/view.php?id=CVE-2018-7093
14 Aug 2018 — A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service. Una vulnerabilidad de seguridad en HPE Integrated Lights-Out 3 en versiones anteriores a la v1.90, iLO 4 en versiones anteriores a la v2.60, iLO 5 en versiones anteriores a la v1.30, Moonshot Chassis Manager con firmware en versiones anteriores... • http://www.securitytracker.com/id/1041435 •
CVSS: 8.6EPSS: 0%CPEs: 2EXPL: 0CVE-2017-8987 – HPE Security Bulletin HPESBHF03826 1
https://notcve.org/view.php?id=CVE-2017-8987
27 Feb 2018 — A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions. Se ha identificado una vulnerabilidad de denegación de servicio (DoS) remota no autenticada en HPE Integrated Lights-Out 3 (iLO 3) solo en la versión v1.88. La vulnerabilidad ha sido resuelta en iLOREST v1.89 o siguientes. A security vulnerability in HPE Integrated Lights-Out 3 (iLO 3) allows remote Denial of Se... • http://www.securitytracker.com/id/1040429 •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-12543 – HPE Security Bulletin HPESBHF03705 4
https://notcve.org/view.php?id=CVE-2017-12543
16 Nov 2017 — A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found. Se ha encontrado una vulnerabilidad de divulgación remota de información en Moonshot Remote Console Administrator en versiones anteriores a la 2.50; iLO 4 en versiones anteriores a la v2.53, iLO3 en versiones anteriores a la v1.89 y iLO2 en versiones anteriores a la v2.30. A potential security vulnerability has been identified in... • http://www.securityfocus.com/bid/101944 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0CVE-2016-4406 – HP Security Bulletin HPSBHF03675 1
https://notcve.org/view.php?id=CVE-2016-4406
20 Nov 2016 — A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44. Se ha identificado una vulnerabilidad remota de Cross-Site Scripting (XSS) en iLO 3 en todas las versiones anteriores a la v1.88 y HPE iLO 4 en todas las versiones anteriores a la v2.44. A potential security vulnerability was addressed by HPE Integrated Lights-Out 3 and 4. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). Revision 1 of... • http://www.securityfocus.com/bid/94426 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-4379 – HP Security Bulletin HPSBHF03641 1
https://notcve.org/view.php?id=CVE-2016-4379
30 Aug 2016 — The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack. La implementación TLS en firmware HPE Integrated Lights-Out 3 (también conocido como iLO3) en versiones anteriores a 1.88 no utiliza adecuadamente un mecanismo de proteción MAC en conjunción con relleno CBC, lo que permite a ataca... • http://www.securityfocus.com/bid/92696 • CWE-310: Cryptographic Issues •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2016-4375 – HP Security Bulletin HPSBHF03441 2
https://notcve.org/view.php?id=CVE-2016-4375
16 Aug 2016 — Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Múltiples vulnerabilidades no especificadas en firmware HPE Integrated Lights-Out 3 (también conocido como iLO 3) en versiones anteriores a 1.88, firmware Integrated L... • http://www.securityfocus.com/bid/92484 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-5435
https://notcve.org/view.php?id=CVE-2015-5435
29 Sep 2015 — Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 3 before 1.85 and 4 before 2.22 allows remote authenticated users to cause a denial of service via unknown vectors. Vulnerabilidad no especificada en HP Integrated Lights-Out (iLO) firmware 3 en versiones anteriores a 1.85 y 4 en versiones anteriores a 2.22, permite a usuarios remotos autenticados provocar una denegación de servicio a través de vectores desconocidos. • http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04785857 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-2106 – HP Security Bulletin HPSBHF03276 1
https://notcve.org/view.php?id=CVE-2015-2106
25 Mar 2015 — Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors. Vulnerabilidad no especificada en el firmware HP Integrated Lights-Out (iLO) 2 anterior a 2.27, 3 anterior a 1.82, y 4 anterior a 2.10 permite a atacantes remotos evadir las restricciones de acceso o causar una denegación de servicio a través de vectores desconocidos. A potential s... • http://www.securityfocus.com/bid/73324 •