CVE-2022-28637

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Sep 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-286387.8An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead CVE-2022-286398.8A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that could potentially lea CVE-2022-28648.8The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7. This is d CVE-2022-286408.8A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and a CVE-2022-286417.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. CVE-2022-286427.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. CVE-2022-286437.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. CVE-2022-286447.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. CVE-2022-286455.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16 CVE-2022-286467.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. CVE-2022-286477.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. CVE-2022-286485.4In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered