CVE-2019-11132

Published: Dec 18, 2019Modified: Jun 17, 2026

8.4

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.7 / Impact: 6.0

Source: NVD

Description

Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access.

Affected (4)

Products: Intel: Active Management Technology Firmware

Intel

1 product

Active Management Technology Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Intel Active Management Technology Firmware	From 11.0 to 11.8.70
Intel Active Management Technology Firmware	From 11.10 to 11.11.70
Intel Active Management Technology Firmware	From 11.20 to 11.22.70
Intel Active Management Technology Firmware	From 12.0 to 12.0.45

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.