CVE-2019-5398

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 9, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-53999.4A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.CVE-2019-54006.3A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.CVE-2019-54014.8A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by settingCVE-2019-54029.4A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5CVE-2019-54034.8A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): priCVE-2019-54048.8A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1CVE-2019-54057.3A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5CVE-2019-54067.2A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.CVE-2019-54076.3A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3CVE-2019-54086.5Command View Advanced Edition (CVAE) products contain a vulnerability that could expose configuration information of hosts and storage systeCVE-2019-54139.8An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.CVE-2019-54148.1If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of th
CVE-2019-5398: Medium severity, CVSS 5.4 | Vulnix