Lucene search

HpeCVE-2019-11999

HistoryApr 16, 2020 - 7:15 p.m.

CVE-2019-11999

2020-04-1619:15:21

CWE-79

hpe

web.nvd.nist.gov

cve-2019-11999

hpe

opencall media platform

ocmp

remote arbitrary file download

cross site scripting

update

vulnerability

nvd

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

59.9%

JSON

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. * For OCMP version 4.4.X - please upgrade to OCMP 4.4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software updates.

Affected configurations

Nvd

Node

hpeopencall_media_platformRange4.4.0–4.4.8

hpeopencall_media_platformRange4.5.0–4.5.2

VendorProductVersionCPE
hpeopencall_media_platform*cpe:2.3:a:hpe:opencall_media_platform:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hpe	opencall_media_platform	*	cpe:2.3:a:hpe:opencall_media_platform::::::::

CNA Affected

[
  {
    "product": "HPE OC Media Platform (OCMP)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OCMP 4.4.8 RP 805,OCMP 4.5.x"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03984en_us

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

59.9%

JSON

Related for CVE-2019-11999