CVE-2021-29201

MEDIUM

4.8

CVSS Score

Published: May 25, 2021 at 01:24 PM UTC

Updated: June 17, 2026 at 03:47 AM UTC

29 products affected across 1 vendorIntegrated Lights Out 4Integrated Lights Out 5SimpliVity 380 Gen10

Using HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers by N/A?

Get instant alerts when new vulnerabilities affect HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.8

Exploit prediction

EPSS 0.7%

Description

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Integrated Lights Out 4 · HP

95%

v < 2.78Prior to HPE Integrated Lights-Out 4 (iLO 4) version 2.78 Prior to HPE Integrated Lights-Out 5 (iLO 5) version 2.44

Affected range stops below 2.78, so it looks safe — our inference, not a vendor statement

hp-simplivity-380-gen9 (environment)

Integrated Lights Out 5 · HP

95%

v < 2.44Prior to HPE Integrated Lights-Out 4 (iLO 4) version 2.78 Prior to HPE Integrated Lights-Out 5 (iLO 5) version 2.44

Affected range stops below 2.44, so it looks safe — our inference, not a vendor statement

hp-proliant-bl460c-gen10-server-blade (environment) · hp-proliant-dl120-gen10-server (environment) · hp-proliant-dl160-gen10-server (environment) · hp-proliant-dl180-gen10-server (environment) · hp-proliant-dl20-gen10-server (environment) · hp-proliant-dl325-gen10-plus-server (environment) · hp-proliant-dl325-gen10-server (environment) · hp-proliant-dl360-gen10-server (environment) · hp-proliant-dl380-gen10-server (environment) · hp-proliant-dl385-gen10-plus-server (environment) · hp-proliant-dl385-gen10-server (environment) · hp-proliant-dl560-gen10-server (environment) · hp-proliant-dl580-gen10-server (environment) · hp-proliant-ml110-gen10-server (environment) · hp-proliant-ml30-gen10-server (environment) · hp-proliant-ml350-gen10-server (environment) · hp-proliant-xl170r-gen10-server (environment) · hp-proliant-xl190r-gen10-server (environment) · hp-proliant-xl230k-gen10-server (environment) · hp-proliant-xl270d-gen10-server (environment) · hp-proliant-xl450-gen10-server (environment) · hp-simplivity-2600 (environment) · hp-simplivity-325 (environment) · hp-simplivity-380-gen10 (environment) · hp-simplivity-380-gen10-g (environment) · hp-simplivity-380-gen10-h (environment)

Proliant Bl460C Gen10 Server Blade · HPdevice

80%

All versions

Proliant Dl120 Gen10 Server · HPdevice

80%

All versions

Proliant Dl160 Gen10 Server · HPdevice

80%

All versions

Proliant Dl180 Gen10 Server · HPdevice

80%

All versions