CVE-2019-5355
HighA remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Published Jun 5, 2019 · Updated Nov 21, 2024
Key Facts
Patch immediately- CVE-2019-5355 is a high-severity vulnerability (CVSS 7.5 v3) affecting Intelligent Management Center (Hp), HPE Intelligent Management Center (IMC) PLAT.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 54% probability of exploitation in the next 30 days.
- Fixed versions are available, including Intelligent Management Center 7.3.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (30-day exploit likelihood)
54%
Higher than 98.9% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2019-5355 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Affected Products
10 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Intelligent Management CenterHp | 7.3, 7.3-e0503, 7.3-e0504, 7.3-e0504p02, 7.3-e0504p04, 7.3-e0506, 7.3-e0506p03, 7.3-e0506p07 | 7.3 |
| HPE Intelligent Management Center (IMC) PLAT | >= 7.3 E0506P09 and earlier | n/a |
Patched Releases
Intelligent Management Center
7.3
Timeline
Publicly disclosed
Jun 5, 2019
Last updated
Nov 21, 2024
Weakness Type
- CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
References
FAQ
Common Questions.
A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Affected: Intelligent Management Center (Hp) versions 7.3, 7.3-e0503, 7.3-e0504, 7.3-e0504p02, 7.3-e0504p04, 7.3-e0506, 7.3-e0506p03, 7.3-e0506p07; HPE Intelligent Management Center (IMC) PLAT versions >= 7.3 E0506P09 and earlier. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Intelligent Management Center 7.3.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2019-5355 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo