CVE-2019-11971: SQL Injection
Published Jun 5, 2019
·Updated
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Affected Software
9 affected components
HP Intelligent Management Center<7.3
HP Intelligent Management Center=7.3
HP Intelligent Management Center=7.3-e0503
HP Intelligent Management Center=7.3-e0504
HP Intelligent Management Center=7.3-e0504p02
HP Intelligent Management Center=7.3-e0504p04
HP Intelligent Management Center=7.3-e0506
HP Intelligent Management Center=7.3-e0506p03
HP Intelligent Management Center=7.3-e0506p07
Event History
Jun 5, 2019
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-11971?
CVE-2019-11971 has a high severity rating due to its potential for SQL injection and code execution vulnerabilities.
2
How do I fix CVE-2019-11971?
To fix CVE-2019-11971, you should upgrade to HPE Intelligent Management Center version 7.3 E0506P09 or later.
3
What versions of HPE Intelligent Management Center are affected by CVE-2019-11971?
HPE Intelligent Management Center versions earlier than 7.3 E0506P09 are affected by CVE-2019-11971.
4
Is CVE-2019-11971 a remote vulnerability?
Yes, CVE-2019-11971 can be exploited remotely due to the nature of SQL injection vulnerabilities.
5
What impact does CVE-2019-11971 have on HPE Intelligent Management Center?
CVE-2019-11971 allows an attacker to execute arbitrary SQL code, potentially compromising the system's data integrity.