CVE-2019-5395 - A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1

HIGH

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1

Published Aug 9, 2019

8.8

HIGH

CVSS 3.0

EPSS 2.30%

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.

Vendor Hewlett Packard Enterprise (HPE) Product HPE 3PAR Service Processor Default
unknown
Affected
- prior to 5.0.5.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Hewlett Packard Enterprise (HPE)	HPE 3PAR Service Processor	unknown	Affected prior to 5.0.5.1

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14999		Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hpe

Published Aug 9, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner hpe

Published Aug 9, 2019

Updated Aug 4, 2024

GitHub

No data