HP Integrated Lights-Out is prone to multiple vulnerabilities.

An attacker may leverage this issue to obtain sensitive information that may aid in further attacks or to execute arbitrary HTML and script code in an unsuspecting user's browser in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Updates are available.

HP Integrated Lights-Out is prone to a Cross Site Scripting and an Information Disclosure Vulnerability.

Versions prior to HP Integrated Lights-Out 4 1.32 and HP Integrated Lights-Out 3 1.65 are vulnerable.

Check the version of HP Integrated Lights-Out.

• http://www.securityfocus.com/bid/63689
• http://www.securityfocus.com/bid/63691

---

Updated on 2015-03-25