Medium severity6.1NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026
CVE-2016-4406
CVE-2016-4406
Description
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.
Affected products
5- cpe:2.3:o:hp:integrated_lights-out_3_firmware:*:*:*:*:*:*:*:*Range: <1.88
- cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*Range: <2.44
- Hewlett Packard Enterprise/HP Integrated Lights-Out 3 (iLO 3), HPE Integrated Lights-Out 4 (iLO 4)v5Range: iLO 3 all version prior to v1.88,iLO 4 all versions prior to v2.44
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/94426nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1037318nvdThird Party AdvisoryVDB Entry
- support.hpe.com/hpsc/doc/public/displaynvdVendor Advisory
News mentions
0No linked articles in our index yet.