Approved changes feed: RSS · Atom

cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductIntegrated Lights Out 4 Firmware (8dcdd16b-4253-59f3-861a-75dff25ab302)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11983 vulnerable 2026-06-08 05:12:38.414108 Details available
A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
Published: 2019-06-05T16:36:07.000Z
Updated: 2024-08-04T23:10:29.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11982 vulnerable 2026-06-08 05:12:38.402972 Details available
A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
Published: 2019-06-05T16:35:10.000Z
Updated: 2024-08-04T23:10:29.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7112 vulnerable 2026-06-08 05:11:54.896831 Details available
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.
Published: 2018-12-03T15:00:00.000Z
Updated: 2024-08-05T06:17:17.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7105 vulnerable 2026-06-08 05:11:54.868166 Details available
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.
Published: 2018-09-27T18:00:00.000Z
Updated: 2024-08-05T06:17:17.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7101 vulnerable 2026-06-08 05:11:54.852415 Details available
A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.
Published: 2018-09-27T18:00:00.000Z
Updated: 2024-08-05T06:17:17.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7093 vulnerable 2026-06-08 05:11:54.820702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7078 vulnerable 2026-06-08 05:11:54.793928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12543 vulnerable 2026-06-08 05:08:47.017863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12542 vulnerable 2026-06-08 05:08:47.014089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4406 vulnerable 2026-06-08 05:07:47.363789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5435 vulnerable 2026-06-08 05:06:50.051285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2106 vulnerable 2026-06-08 05:06:27.463040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7876 vulnerable 2026-06-08 05:06:00.337513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2338 vulnerable 2026-06-08 05:04:24.932876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3271 vulnerable 2026-06-08 05:02:08.836190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.