Security Issue iLo5 FW 2.78

[Marcel_D]

Hi,

our Security Monitoring Department figured out an issue on iLo5 FW 2.78.

The web application uses jQuery UI version 1.12.1, which contains some known vulnerabilities. For example, it is vulnerable to cross-site scripting attacks4 vulnerable.

The jQuery UI version was read out via the Firefox developer tools. To do this, the command $.ui.version
was executed in the console.

It is recommended to update the jQuery UI library.

IS HPE aware of this and will HPE provide an Update with the next Version?

[ShabbyBRO · Accepted solution]

Report a potential zero-day security vulnerability to Hewlett Packard Enterprise

link - https://www.hpe.com/h41268/live/index_e.aspx?qid=11503