CVE-2019-11976: SQL Injection
Published Jun 5, 2019
·Updated
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Affected Software
9 affected components
HP Intelligent Management Center<7.3
HP Intelligent Management Center=7.3
HP Intelligent Management Center=7.3-e0503
HP Intelligent Management Center=7.3-e0504
HP Intelligent Management Center=7.3-e0504p02
HP Intelligent Management Center=7.3-e0504p04
HP Intelligent Management Center=7.3-e0506
HP Intelligent Management Center=7.3-e0506p03
HP Intelligent Management Center=7.3-e0506p07
Event History
Jun 5, 2019
CVE Published
via MITRE·03:26 PM
Data Sourced
via MITRE·03:26 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-11976?
CVE-2019-11976 has been assigned a high severity rating due to its SQL injection capabilities.
2
How do I fix CVE-2019-11976?
To mitigate CVE-2019-11976, upgrade to a version of HPE Intelligent Management Center that is 7.3 E0506P09 or later.
3
What types of attacks can exploit CVE-2019-11976?
CVE-2019-11976 can be exploited through SQL injection attacks, allowing unauthorized access to the database.
4
Which software versions are affected by CVE-2019-11976?
CVE-2019-11976 affects all versions of HP Intelligent Management Center prior to 7.3 E0506P09.
5
What component of HPE Intelligent Management Center is vulnerable in CVE-2019-11976?
CVE-2019-11976 pertains to the SQL interface within HPE Intelligent Management Center.