High severity8.3NVD Advisory· Published Mar 22, 2023· Updated Jun 17, 2026

CVE-2023-28083

Description

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.

Affected products

HPE/Integrated Lights Outcpe-rescue
Range: Integrated Lights-Out 6 (iLO 6)
Microfocus/Integrated Lights Out 4 Firmware
cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*
Range: <2.82
Microfocus/Integrated Lights Out 5
cpe:2.3:o:hp:integrated_lights-out_5:*:*:*:*:*:*:*:*
Range: <2.78
Microfocus/Integrated Lights Out 6
cpe:2.3:o:hp:integrated_lights-out_6:*:*:*:*:*:*:*:*
Range: <1.20
HPE/Integrated Lights-Out 3llm-fuzzy
HPE/Integrated Lights-Out 5llm-fuzzy
HPE/Integrated Lights-Out 4 (iLO 4)llm-fuzzy

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2023-28083

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions