CVE-2019-11982: HP Integrated Lights-Out 4 Firmware

High severity, CVSS 8.3. EPSS: 2.1% chance of exploitation in the next 30 days.

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Affected products

• HP Integrated Lights-Out 4 Firmware: up to and including 2.61b
• HP Integrated Lights-Out 5 Firmware: up to and including 1.39

Published 2019-06-05. Last modified 2026-06-17.