Known vulnerabilities in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers

Known vulnerabilities in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers

Vendor: HPE

Software: HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers

Software CPE: cpe:2.3:h:hpe:hpe_integrated_lights-out_5_ilo_5_for_hpe_gen10_servers:*:*:*:*:*:*:*:*

Website: https://www.hpe.com

Total vulnerabilities: 17

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84846 - Improper Authentication CVE-2023-50272	CWE-287	Medium	No	No	3.00	28.12.2023	SB2023122817
#VU67484 - Improper input validation CVE-2022-28640	CWE-20	Low	No	No	2.72	20.09.2022	SB2022092014
#VU67483 - Improper input validation CVE-2022-28639	CWE-20	Medium	No	No	2.72	20.09.2022	SB2022092014
#VU67482 - Improper input validation CVE-2022-28638	CWE-20	Low	No	No	2.72	20.09.2022	SB2022092014
#VU67481 - Improper input validation CVE-2022-28637	CWE-20	Low	No	No	2.72	20.09.2022	SB2022092014
#VU65941 - Improper input validation CVE-2022-28636	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65939 - Improper input validation CVE-2022-28635	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65938 - Improper input validation CVE-2022-28634	CWE-20	Medium	No	No	2.71	02.08.2022	SB2022080218
#VU65936 - Improper input validation CVE-2022-28633	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65934 - Improper input validation CVE-2022-28632	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65933 - Improper input validation CVE-2022-28631	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65931 - Improper input validation CVE-2022-28630	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65930 - Improper input validation CVE-2022-28629	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65926 - Improper input validation CVE-2022-28628	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65924 - Improper input validation CVE-2022-28627	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU65923 - Improper input validation CVE-2022-28626	CWE-20	High	No	No	2.71	02.08.2022	SB2022080218
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778	CWE-835	Medium	Available	No	2.72	15.03.2022	SB2022031520 SB2022031522 SB2022031611 and 238 more