7.8

CVE-2019-5355

A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Intelligent Management Center Version 7.3 Update -
Hp ≫ Intelligent Management Center Version 7.3 Update e0503
Hp ≫ Intelligent Management Center Version 7.3 Update e0504
Hp ≫ Intelligent Management Center Version 7.3 Update e0504p02
Hp ≫ Intelligent Management Center Version 7.3 Update e0504p04
Hp ≫ Intelligent Management Center Version 7.3 Update e0506
Hp ≫ Intelligent Management Center Version 7.3 Update e0506p03
Hp ≫ Intelligent Management Center Version 7.3 Update e0506p07
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 53.97% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03930en_us
Vendor Advisory