CVE-2019-11982: XSS
First published: Wed Jun 05 2019(Updated: )
A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hp Integrated Lights-out 5 Firmware | <=1.39 | |
| Hp Proliant Bl460c Gen10 | ||
| Hp Proliant Dl120 Gen10 | ||
| Hp Proliant Dl160 Gen10 | ||
| Hp Proliant Dl180 Gen10 | ||
| Hp Proliant Dl20 Gen10 | ||
| Hp Proliant Dl325 Gen10 | ||
| Hp Proliant Dl360 Gen10 | ||
| Hp Proliant Dl380 Gen10 | ||
| Hp Proliant Dl385 Gen10 | ||
| Hp Proliant Dl560 Gen10 | ||
| Hp Proliant Dl580 Gen10 | ||
| Hp Proliant Microserver Gen10 | ||
| Hp Proliant Ml110 Gen10 | ||
| Hp Proliant Ml350 Gen10 | ||
| Hp Proliant Xl170r Gen10 | ||
| Hp Proliant Xl190r Gen10 | ||
| Hp Proliant Xl230k Gen10 | ||
| Hp Proliant Xl450 Gen10 | ||
| Hp Integrated Lights-out 4 Firmware | <=2.61b | |
| Hp Proliant Bl460c Gen9 | ||
| Hp Proliant Dl120 Gen9 | ||
| Hp Proliant Dl180 Gen9 | ||
| Hp Proliant Dl360 Gen9 | ||
| Hp Proliant Dl380 Gen9 | ||
| Hp Proliant Dl580 Gen9 | ||
| Hp Proliant Ml10 Gen9 | =2 | |
| Hp Proliant Ml110 Gen9 | ||
| Hp Proliant Ml150 Gen9 | ||
| Hp Proliant Ml30 Gen9 | =2 | |
| Hp Proliant Ml350 Gen9 | ||
| Hp Proliant Ws460c Gen9 | ||
| Hp Proliant Xl170r Gen9 | ||
| Hp Proliant Xl190r Gen9 | ||
| Hp Proliant Xl230a Gen9 | ||
| Hp Proliant Xl250a Gen9 | ||
| Hp Proliant Xl730f Gen9 | ||
| Hp Proliant Xl740f Gen9 | ||
| Hp Proliant Xl750f Gen9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-11982?
CVE-2019-11982 is a remote cross site scripting vulnerability in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
What software is affected by CVE-2019-11982?
The HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39 are affected by CVE-2019-11982.
How severe is CVE-2019-11982?
CVE-2019-11982 has a severity level of 8.3 (high).
How can I fix CVE-2019-11982?
To fix CVE-2019-11982, upgrade HPE Integrated Lights-Out 4 (iLO 4) to version v2.61b or later for Gen9 servers and upgrade Integrated Lights-Out 5 (iLO 5) to version v1.39 or later for Gen10 Servers.
Where can I find more information about CVE-2019-11982?
You can find more information about CVE-2019-11982 [here](https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03917en_us).
- collector/nvd-index
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/hp
- canonical/hp integrated lights-out 5 firmware
- version/hp integrated lights-out 5 firmware/1.39
- canonical/hp proliant bl460c gen10
- canonical/hp proliant dl120 gen10
- canonical/hp proliant dl160 gen10
- canonical/hp proliant dl180 gen10
- canonical/hp proliant dl20 gen10
- canonical/hp proliant dl325 gen10
- canonical/hp proliant dl360 gen10
- canonical/hp proliant dl380 gen10
- canonical/hp proliant dl385 gen10
- canonical/hp proliant dl560 gen10
- canonical/hp proliant dl580 gen10
- canonical/hp proliant microserver gen10
- canonical/hp proliant ml110 gen10
- canonical/hp proliant ml350 gen10
- canonical/hp proliant xl170r gen10
- canonical/hp proliant xl190r gen10
- canonical/hp proliant xl230k gen10
- canonical/hp proliant xl450 gen10
- canonical/hp integrated lights-out 4 firmware
- version/hp integrated lights-out 4 firmware/2.61b
- canonical/hp proliant bl460c gen9
- canonical/hp proliant dl120 gen9
- canonical/hp proliant dl180 gen9
- canonical/hp proliant dl360 gen9
- canonical/hp proliant dl380 gen9
- canonical/hp proliant dl580 gen9
- canonical/hp proliant ml10 gen9
- version/hp proliant ml10 gen9/2
- canonical/hp proliant ml110 gen9
- canonical/hp proliant ml150 gen9
- canonical/hp proliant ml30 gen9
- version/hp proliant ml30 gen9/2
- canonical/hp proliant ml350 gen9
- canonical/hp proliant ws460c gen9
- canonical/hp proliant xl170r gen9
- canonical/hp proliant xl190r gen9
- canonical/hp proliant xl230a gen9
- canonical/hp proliant xl250a gen9
- canonical/hp proliant xl730f gen9
- canonical/hp proliant xl740f gen9
- canonical/hp proliant xl750f gen9