CVE-2013-4842: XSS
Published Nov 16, 2013
·Updated
Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
8 affected components
HP Integrated Lights-out Firmware<=1.27a
HP Integrated Lights-out Firmware=1.10
HP Integrated Lights-out Firmware=1.15
HP Integrated Lights-out Firmware=1.15a
HP Integrated Lights-out Firmware=1.16a
HP Integrated Lights-out Firmware=1.20a
HP Integrated Lights-out Firmware=1.26a
HP Integrated Lights-Out 4
Event History
Nov 16, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4842?
CVE-2013-4842 has been rated as medium severity due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-4842?
To remediate CVE-2013-4842, upgrade the HP Integrated Lights-Out 4 firmware to version 1.32 or later.
3
What is the impact of CVE-2013-4842?
The impact of CVE-2013-4842 allows attackers to inject arbitrary web scripts or HTML, compromising user data and sessions.
4
What versions of HP Integrated Lights-Out are affected by CVE-2013-4842?
CVE-2013-4842 affects all versions of HP Integrated Lights-Out firmware before version 1.32.
5
Who is at risk from CVE-2013-4842?
Remote attackers can exploit CVE-2013-4842 to conduct cross-site scripting attacks against users accessing the vulnerable firmware.