CVE-2019-11970

This entry documents a SQL injection code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. The flaw exists in the ImcplatResServiceSkeleton’s handling of SQL queries (queryDataBySQL), where insufficient input validation ...