AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-23701

MEDIUM · CVSS 5.3 EPSS 0.69% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-02-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-23701
Severity
MEDIUM
CVSS
5.3
EPSS
0.69%

Original NVD Description

A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60. This vulnerability could be remotely exploited to allow an attacker to supply invalid input to the iLO 4 webserver, causing it to respond with a redirect to an attacker-controlled domain. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 4 (iLO 4).