CVE-2021-29201

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 (iLO 4) versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE SimpliVity 2600 versions prior to 2.78 HPE SimpliVity 380 Gen10 G versions prior to 2.78 HPE SimpliVity 325 versions prior to 2.78 HPE SimpliVity 380 Gen10 H versions prior to 2.78

Description: A remote XSS vulnerability was discovered in several HPE products. This issue allows for potential exploitation.

Recommendations: For HPE Integrated Lights-Out 4 (iLO 4) versions prior to 2.78, update to version 2.78 or later. For HPE SimpliVity 380 Gen9 versions prior to 2.78, update to version 2.78 or later. For HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers versions prior to 2.78, update to version 2.78 or later. For HPE SimpliVity 380 Gen10 versions prior to 2.78, update to version 2.78 or later. For HPE SimpliVity 2600 versions prior to 2.78, update to version 2.78 or later. For HPE SimpliVity 380 Gen10 G versions prior to 2.78, update to version 2.78 or later. For HPE SimpliVity 325 versions prior to 2.78, update to version 2.78 or later. For HPE SimpliVity 380 Gen10 H versions prior to 2.78, update to version 2.78 or later.