A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.
| Software | From | Fixed in |
|---|---|---|
| hp / integrated_lights-out_5_firmware | - | 1.39.x |
| hp / integrated_lights-out_4_firmware | - | 2.61b.x |