CVE-2022-23701

A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60

published February 24, 2022

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60. This vulnerability could be remotely exploited to allow an attacker to supply invalid input to the iLO 4 webserver, causing it to respond with a redirect to an attacker-controlled domain. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 4 (iLO 4).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00685 · 52.0th percentile
Published
2022-02-24T21:05Z
EPSS history
Timeline
  • 24 FEB 21:05Z
    A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60
    cvelistv5