SQL Injection Vulnerability in HPE Intelligent Management Center Software

CVE-2019-11974

What is CVE-2019-11974?

A SQL injection vulnerability was discovered in HPE Intelligent Management Center (IMC) PLAT, affecting versions prior to 7.3 E0506P09. Through this vulnerability, an attacker could potentially execute arbitrary SQL code, leading to unauthorized access and manipulation of the database. This could expose sensitive information or allow for further exploitation of the system. It is crucial for organizations using affected versions to apply available patches or updates to mitigate the risk.

References