Vulnerability Details CVE-2019-11991
HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 9.7
References
Products affected by CVE-2019-11991
-
cpe:2.3:h:hp:3par_service_processor:-
-
cpe:2.3:o:hp:3par_service_processor_firmware:4.1
-
cpe:2.3:o:hp:3par_service_processor_firmware:4.4