CVE-2019-11993

🗓️ 03 Jan 2020 18:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 22 Views

A security vulnerability in multiple HPE SimpliVity nodes allows remote attackers to create or delete arbitrary files without authentication, requiring an immediate upgrade to OmniStack version 3.7.10 or newer

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2019-11993	19 Mar 202411:11	–	circl
CNVD	Unspecified Vulnerability in Multiple HPE Products	7 Jan 202000:00	–	cnvd
CVE	CVE-2019-11993	3 Jan 202017:18	–	cve
Cvelist	CVE-2019-11993	3 Jan 202017:18	–	cvelist
EUVD	EUVD-2019-3649	7 Oct 202500:30	–	euvd
HPE Security Bulletins	HPESBHF03955 rev.2 - HPE SimpliVity OmniStack, Local and Remote File Modification and Deletion	30 Sep 201900:00	–	hpe
OSV	CVE-2019-11993	3 Jan 202018:15	–	osv
Prion	Design/Logic Flaw	3 Jan 202018:15	–	prion
RedhatCVE	CVE-2019-11993	9 Jan 202610:12	–	redhatcve

NVD

Node

hp simplivity_380_gen9_firmwareRange3.6.2–3.7.9

AND

hp simplivity_380_gen9Match-

Node

hp simplivity_380_gen10_g_firmwareRange3.7.8–3.7.9

AND

hp simplivity_380_gen10_gMatch-

Node

hp simplivity_380_gen10_firmwareRange3.7.1–3.7.9

AND

hp simplivity_380_gen10Match-

Node

hp simplivity_2600_gen10_firmwareRange3.7.5–3.7.9

AND

hp simplivity_2600_gen10Match-

Node

hp simplivity_omnicube_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnicubeMatch-

Node

hp simplivity_omnistack_for_dell_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnistack_for_dellMatch-

Node

hp simplivity_omnistack_for_cisco_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnistack_for_ciscoMatch-

Node

hp simplivity_omnistack_for_lenovo_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnistack_for_lenovoMatch-

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

17 Jun 2026 02:13Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.5

CVSS 29.4

EPSS0.0153

hpe simplivity vulnerability remote attackers file manipulation authentication upgrade omnistack.