CVE-2021-29208

CVE	CVE-2021-29208
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-05-25 15:15:00 UTC
Updated	2022-04-25 20:10:00 UTC
Description	A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.

Problem Types: CWE-79 | CWE-74

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Hp	Integrated Lights-out 4	All	All	All	All
Operating System	Hp	Integrated Lights-out 5	All	All	All	All
Hardware	Hp	Proliant Bl460c Gen10 Server Blade	-	All	All	All
Hardware	Hp	Proliant Dl120 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl160 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl180 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl20 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl325 Gen10 Plus Server	-	All	All	All
Hardware	Hp	Proliant Dl325 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl360 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl380 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl385 Gen10 Plus Server	-	All	All	All
Hardware	Hp	Proliant Dl385 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl560 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Dl580 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Ml110 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Ml30 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Ml350 Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Xl170r Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Xl190r Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Xl230k Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Xl270d Gen10 Server	-	All	All	All
Hardware	Hp	Proliant Xl450 Gen10 Server	-	All	All	All
Hardware	Hp	Simplivity 2600	-	All	All	All
Hardware	Hp	Simplivity 325	-	All	All	All
Hardware	Hp	Simplivity 380 Gen10	-	All	All	All
Hardware	Hp	Simplivity 380 Gen10 G	-	All	All	All
Hardware	Hp	Simplivity 380 Gen10 H	-	All	All	All
Hardware	Hp	Simplivity 380 Gen9	-	All	All	All

Reference	Source	Link	Tags
support.hpe.com/hpsc/doc/public/display	MISC	support.hpe.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

730100 HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) Multiple Vulnerabilities (HPESBHF04133, HPESBHF04134, HPESBHF04121)