CVE-2019-11999

MEDIUM

HPE OpenCall Media Platform <4.4.8, 4.5.x - RCE, XSS

Title source: llm

Description

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. * For OCMP version 4.4.X - please upgrade to OCMP 4.4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software updates.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03984en_us

Scores

CVSS v3 6.9

EPSS 0.0026

EPSS Percentile 49.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

hpe/opencall_media_platform 4.4.0 - 4.4.8

Published Apr 16, 2020

Tracked Since Feb 18, 2026