CVE-2019-11984

The CVE-2019-11984 case concerns HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09, where a SQL injection in the updateEmailSuffix path allows arbitrary code execution. The root cause is improper validation of a user-supplied string used to construct SQL queries, enabling an attack...