CVE-2019-11987

HIGH 7.8CVE-2019-11987 · Published 05/06/2019 · updated 17/06/2026

In short

CVE-2019-11987 is a HIGH (CVSS 7.8) vulnerability affecting smart update manager (hpe).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 24.6% of all vulnerabilities.
Fix: update to 8.4 or later.

Package	Affected versions	Patched versions
smart update manager hpe	`< 8.4`	`8.4`

A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.