CVE-2018-7117: HP Integrated Lights-Out 5 Firmware

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.

Affected products

• HP Integrated Lights-Out 5 Firmware: before 1.40 (fixed in 1.40)

Published 2019-04-09. Last modified 2026-06-17.