PT-2020-9233

CVE-2019-11999

·

Published

2020-04-16

·

Updated

2020-05-01

Description by

CVSS 3.1
6.9
Medium
MetricsAV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions HPE OpenCall Media Platform (OCMP) versions 4.4.X through 4.4.7 HPE OpenCall Media Platform (OCMP) version 4.5.x
Description Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting.
Recommendations For OCMP version 4.4.X, please upgrade to OCMP 4.4.8 and then install RP806. For OCMP 4.5.x, please contact HPE Technical Support to obtain the necessary software updates.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2019-11999
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com