{"id":"CVE-2021-26583","aliases":["EUVD-2021-13381","GHSA-jvpj-x4cx-678c"],"status":"published","title":"Potential security vulnerabilities have been identified in HPE iLO Amplifier Pack using bootstrap...","description":"A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0443,"percentile":0.91495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-05-10T12:38:42Z","modified":"2026-06-17T03:43:31Z","products":[{"vendor":"hp","product":"ilo_amplifier_pack"}],"references":[{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn04129en_us","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26583"},{"url":"https://github.com/advisories/GHSA-jvpj-x4cx-678c"}],"sources":{"cve":[{"id":"CVE-2021-26583","description":"A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution.","status":"published","published":"2021-05-10T12:38:42Z","modified":"2024-08-03T20:26:25.538Z","updated_at":"2026-11-02T14:32:57.368269Z"}],"euvd":[{"id":"EUVD-2021-13381","description":"A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution.","status":"published","published":"2021-05-10T12:38:42Z","modified":"2024-08-03T20:26:25Z","updated_at":"2026-11-03T03:24:51.40664Z"}],"ghsa":[{"id":"GHSA-jvpj-x4cx-678c","title":"Potential security vulnerabilities have been identified in HPE iLO Amplifier Pack using bootstrap...","description":"Potential security vulnerabilities have been identified in HPE iLO Amplifier Pack using bootstrap framework. The vulnerabilities could be remotely exploited to allow remote code execution and cross site scripting (XSS). HPE has released a software update to resolve the vulnerabilities in the HPE iLO Amplifier Pack.","status":"published","published":"2022-05-24T19:01:55Z","modified":"2023-01-29T05:07:35Z","updated_at":"2026-11-02T14:46:10.663769Z"}],"nvd":[{"id":"CVE-2021-26583","description":"A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution.","status":"published","published":"2021-05-10T13:15:09.19Z","modified":"2026-06-17T03:43:31.143Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:06:53.343329Z"}]}}