What is the severity of CVE-2019-11970?

CVE-2019-11970 is classified as a critical severity vulnerability.

How do I fix CVE-2019-11970?

To fix CVE-2019-11970, upgrade HPE Intelligent Management Center to version 7.3 E0506P10 or later.

What is the impact of CVE-2019-11970?

The impact of CVE-2019-11970 allows an attacker to execute arbitrary SQL commands via crafted inputs.

Which versions of HPE Intelligent Management Center are affected by CVE-2019-11970?

CVE-2019-11970 affects versions of HPE Intelligent Management Center prior to 7.3 E0506P09.

Is there a workaround for CVE-2019-11970?

There is currently no known workaround for CVE-2019-11970; updating the software is recommended.

Vulnerability/
CVE-2019-11970

critical

CWE

5/6/2019

4/8/2024

CVE-2019-11970: SQL Injection

First published: Wed Jun 05 2019(Updated: )

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

Credit: security-alert@hpe.com

Affected Software	Affected Version	How to fix
HP Intelligent Management Center	<7.3
HP Intelligent Management Center	=7.3
HP Intelligent Management Center	=7.3-e0503
HP Intelligent Management Center	=7.3-e0504
HP Intelligent Management Center	=7.3-e0504p02
HP Intelligent Management Center	=7.3-e0504p04
HP Intelligent Management Center	=7.3-e0506
HP Intelligent Management Center	=7.3-e0506p03
HP Intelligent Management Center	=7.3-e0506p07

Never miss a vulnerability like this again

Reference Links

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03930en_us

Frequently Asked Questions

What is the severity of CVE-2019-11970?
CVE-2019-11970 is classified as a critical severity vulnerability.
How do I fix CVE-2019-11970?
To fix CVE-2019-11970, upgrade HPE Intelligent Management Center to version 7.3 E0506P10 or later.
What is the impact of CVE-2019-11970?
The impact of CVE-2019-11970 allows an attacker to execute arbitrary SQL commands via crafted inputs.
Which versions of HPE Intelligent Management Center are affected by CVE-2019-11970?
CVE-2019-11970 affects versions of HPE Intelligent Management Center prior to 7.3 E0506P09.
Is there a workaround for CVE-2019-11970?
There is currently no known workaround for CVE-2019-11970; updating the software is recommended.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/severity
agent/references
agent/last-modified-date
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/hp
canonical/hp intelligent management center
version/hp intelligent management center/7.3
version/hp intelligent management center/7.3-e0503
version/hp intelligent management center/7.3-e0504
version/hp intelligent management center/7.3-e0504p02
version/hp intelligent management center/7.3-e0504p04
version/hp intelligent management center/7.3-e0506
version/hp intelligent management center/7.3-e0506p03
version/hp intelligent management center/7.3-e0506p07

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2019-11970?
CVE-2019-11970 is classified as a critical severity vulnerability.
How do I fix CVE-2019-11970?
To fix CVE-2019-11970, upgrade HPE Intelligent Management Center to version 7.3 E0506P10 or later.
What is the impact of CVE-2019-11970?
The impact of CVE-2019-11970 allows an attacker to execute arbitrary SQL commands via crafted inputs.
Which versions of HPE Intelligent Management Center are affected by CVE-2019-11970?
CVE-2019-11970 affects versions of HPE Intelligent Management Center prior to 7.3 E0506P09.
Is there a workaround for CVE-2019-11970?
There is currently no known workaround for CVE-2019-11970; updating the software is recommended.