CVE-2019-11999

MEDIO 6.9CVE-2019-11999 · Published 16/04/2020 · updated 17/06/2026

En resumen

CVE-2019-11999 es una vulnerabilidad MEDIO (CVSS 6.9) que afecta a opencall media platform (hpe).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.80%, mayor que el 56.7% de las vulnerabilidades.
Solución: actualizar a 4.4.8, 4.5.2 o posterior.

Package	Affected versions	Patched versions
opencall media platform hpe	`≥ 4.4.0, < 4.4.8≥ 4.5.0, < 4.5.2`	`4.4.84.5.2`

Description

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. * For OCMP version 4.4.X - please upgrade to OCMP 4.4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software updates.

References

support.hpe.com/hpsc/doc/public/display · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free