CVE-2019-11969

🗓️ 05 Jun 2019 15:23:25Reported by hpeType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

A remote code execution vulnerability in HPE IMC PLAT prior to 7.3 E0506P09

Reporter	Title	Published	Views	Family All 8
CNVD	HPE Intelligent Management Center (IMC) ForwardRedirect Expression Language Injection Remote Code Execution Vulnerability	6 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-11969	5 Jun 201915:23	–	cvelist
EUVD	EUVD-2019-3625	7 Oct 202500:30	–	euvd
NVD	CVE-2019-11969	5 Jun 201916:29	–	nvd
OSV	CVE-2019-11969	5 Jun 201916:29	–	osv
Prion	Remote code execution	5 Jun 201916:29	–	prion
RedhatCVE	CVE-2019-11969	9 Jan 202610:10	–	redhatcve
Source Incite	SRC-2019-0042 : Hewlett Packard Enterprise Intelligent Management Center ForwardRedirect Expression Language Injection Remote Code Execution Vulnerability	9 May 201800:00	–	srcincite

NVD

Node

hp intelligent_management_centerRange<7.3

hp intelligent_management_centerMatch7.3-

hp intelligent_management_centerMatch7.3e0503

hp intelligent_management_centerMatch7.3e0504

hp intelligent_management_centerMatch7.3e0504p02

hp intelligent_management_centerMatch7.3e0504p04

hp intelligent_management_centerMatch7.3e0506

hp intelligent_management_centerMatch7.3e0506p03

hp intelligent_management_centerMatch7.3e0506p07

[
  {
    "product": "HPE Intelligent Management Center (IMC) PLAT",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "7.3 E0506P09 and earlier"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

Parameter	Position	Path	Description	CWE
beanName	query param	ForwardRedirect.xhtml	Remote code execution via unsafe handling of beanName/actionbean in ForwardRedirect.xhtml leading to rendering of user-supplied string and potential code execution.	CWE-917
actionbean	query param	ForwardRedirect.xhtml	Remote code execution via unsafe handling of beanName/actionbean in ForwardRedirect.xhtml leading to rendering of user-supplied string and potential code execution.	CWE-917

21 Nov 2024 04:22Current

9High risk

Vulners AI Score9

CVSS 38.8

CVSS 29

EPSS0.01591

CWE-917