CVE-2019-11999

MEDIUM 6.9CVE-2019-11999 · Published 16/04/2020 · updated 17/06/2026

In short

CVE-2019-11999 is a MEDIUM (CVSS 6.9) vulnerability affecting opencall media platform (hpe).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.7% of all vulnerabilities.
Fix: update to 4.4.8, 4.5.2 or later.

Package	Affected versions	Patched versions
opencall media platform hpe	`≥ 4.4.0, < 4.4.8≥ 4.5.0, < 4.5.2`	`4.4.84.5.2`

Description

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. * For OCMP version 4.4.X - please upgrade to OCMP 4.4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software updates.

References

support.hpe.com/hpsc/doc/public/display · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free