PT-2020-9231

CVE-2019-11997

·

Published

2020-01-16

·

Updated

2020-01-27

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0
Description A potential security issue has been identified that could allow unauthorized access to information via cross-site scripting.
Recommendations For eIUM version 8.3, install the eIUM83FP01Patch QXCR1001711284.20190806-1244 patch. For eIUM version 9.0, upgrade to eIUM 9.0 FP02 PI5 or later versions. For other versions, contact the product support.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2019-11997
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com