CVE-2019-11998

HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online) and v3.20.206 (available online). Apply v3.20.206 (4 December 2019) or a newer version to resolve this issue. Please visit HPE Support Center https://support.hpe.com/hpesc/public/home to obtain the updated firmware for your product.

• CWE-20

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_usVendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_usVendor Advisory

Published

Jan 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11992A security vulnerability in HPE OneView for VMware vCenter 9…6.1
• CVE-2019-11993A security vulnerability has been identified in HPE SimpliVi…7.5
• CVE-2019-11994A security vulnerability has been identified in HPE SimpliVi…9.8
• CVE-2019-11995Security vulnerabilities in HPE UIoT version 1.2.4.2 could a…7.5
• CVE-2019-11996Potential security vulnerabilities have been identified with…9.8
• CVE-2019-11997A potential security vulnerability has been identified in HP…6.1
• CVE-2019-11999Potential security vulnerabilities have been identified in H…6.9
• CVE-2019-1200A remote code execution vulnerability exists in Microsoft Ou…
• CVE-2019-12000HPE has found a potential Remote Access Restriction Bypass i…6.6
• CVE-2019-12001A remote session reuse vulnerability leading to access restr…6.4
• CVE-2019-12002A remote session reuse vulnerability leading to access restr…9.8
• CVE-2019-12003Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…