CVE-2023-28083

CVSS V2 None CVSS V3 None
Description
A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.
Overview
  • CVE ID
  • CVE-2023-28083
  • Assigner
  • security-alert@hpe.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-03-22T06:15:10
  • Last Modified Date
  • 2023-03-24T20:20:46
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:* 1 OR 2.82
cpe:2.3:h:hpe:apollo_4200_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_r2000_chassis:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl120_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl160_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl160_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl180_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl20_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl360_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl380_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl385p_gen8_\(amd\):-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl560_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl560_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl580_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl580_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl60_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl80_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_microserver_gen8:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml110_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml30_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml350_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl230b_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl270d_gen9_special_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl450_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1430_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1440_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1450_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1530_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1540_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1550_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1630_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1640_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1650_expanded_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1650_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1830_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1840_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1850_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3830_gateway_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3830_gateway_storage_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3840_gateway_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3840_gateway_storage_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3850_gateway_single_node_upgrade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3850_gateway_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_3850_gateway_storage_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storevirtual_3000_file_controller:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_480_gen9_compute_module:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_620_gen9_compute_module:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_660_gen9_compute_module:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_680_gen9_compute_module:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:integrated_lights-out_5:*:*:*:*:*:*:*:* 1 OR 2.78
cpe:2.3:h:hpe:apollo_4200_gen10_plus_system:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_4200_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_4510_gen10_system:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_6500_gen10_plus_system:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_6500_gen10_system:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_r2200_gen10:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_r2600_gen10:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:apollo_r2800_gen10:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:edgeline_e920_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:edgeline_e920d_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:edgeline_e920t_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl120_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl160_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl180_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl20_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl325_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl360_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl380_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl385_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl560_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl580_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx360_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx380_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dx560_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_e910_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_e910t_server_blade:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml110_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml350_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl450_gen10_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storage_file_controller:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storage_performance_file_controller:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1460_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1560_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1660_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:storeeasy_1860_storage:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_480_gen10_compute_module:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_480_gen10_plus_compute_module:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:synergy_660_gen10_compute_module:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:integrated_lights-out_6:*:*:*:*:*:*:*:* 1 OR 1.20
cpe:2.3:h:hpe:proliant_dl320_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl325_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl345_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl360_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl365_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl380_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_dl385_gen11_server:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:hpe:proliant_ml350_gen11_server:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-28083
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28083
History
Created Old Value New Value Data Type Notes
2023-04-17 03:06:24 Added to TrackCVE
2023-04-17 03:06:27 Weakness Enumeration new