CVE Feed

    Dashboard / CVE / CVE-2021-46846

    CVE-2021-46846

    Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.

    Published:Nov 3, 2022
    Last Modified:May 2, 2025
    EPS:Nov 3, 2022
    EPSS Score:0.00139
    CVSS Score:6.4

    Affected Products

    Vendor
    Hp
    Product
    3par Service Processor
    Vendor
    Hp
    Product
    Apollo R2000 Chassis
    Vendor
    Hp
    Product
    Integrated Lights-out 5 Firmware
    Vendor
    Hpe
    Product
    Apollo 2000 Gen10 Plus System
    Vendor
    Hpe
    Product
    Apollo 4200 Gen10 Server
    Vendor
    Hpe
    Product
    Apollo 4510 Gen10 System
    Vendor
    Hpe
    Product
    Apollo 6500 Gen10 Plus System
    Vendor
    Hpe
    Product
    Integrated Lights-out 5
    Vendor
    Hpe
    Product
    Proliant Bl460c Gen10 Server Blade
    Vendor
    Hpe
    Product
    Proliant Dl120 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl160 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl180 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl20 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl325 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl325 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl360 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl380 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl385 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl385 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl560 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl580 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx385 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant E910 Server Blade
    Vendor
    Hpe
    Product
    Proliant E910t Server Blade
    Vendor
    Hpe
    Product
    Proliant M750 Server Blade
    Vendor
    Hpe
    Product
    Proliant Microserver Gen10
    Vendor
    Hpe
    Product
    Proliant Microserver Gen10 Plus
    Vendor
    Hpe
    Product
    Proliant Ml110 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Ml30 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Ml350 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl170r Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl190r Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl220n Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl230k Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl270d Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl290n Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl450 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl645d Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl675d Gen10 Plus Server
    Vendor
    Hpe
    Product
    Storage File Controller
    Vendor
    Hpe
    Product
    Storeeasy 1460 Storage
    Vendor
    Hpe
    Product
    Storeeasy 1560 Storage
    Vendor
    Hpe
    Product
    Storeeasy 1660 Expanded Storage
    Vendor
    Hpe
    Product
    Storeeasy 1660 Storage
    Vendor
    Hpe
    Product
    Storeeasy 1860 Storage

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-22442 (CVSS 9.8) — The vulnerability could be remotely exploited to bypass authentication.…
    CVE-2019-5400 (CVSS 6.3) — A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1…
    CVE-2019-5399 (CVSS 9.4) — A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior t…
    CVE-2019-5398 (CVSS 5.4) — A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): p…
    CVE-2019-5397 (CVSS 9.4) — A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s)…
    CVE-2019-5396 (CVSS 9.4) — A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to…
    CVE-2019-5395 (CVSS 8.8) — A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to…
    CVE-2019-11991 (CVSS 9.8) — HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Servic…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High