CVE-2019-11132

Published: Dec 18, 2019Modified: Jun 17, 2026

8.4

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.7 / Impact: 6.0

Source: NVD

Description

Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access.

Affected (4)

Products: Intel: Active Management Technology Firmware

Intel

1 product

Active Management Technology Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Intel Active Management Technology Firmware	11.0 ≤ version < 11.8.70
Intel Active Management Technology Firmware	11.10 ≤ version < 11.11.70
Intel Active Management Technology Firmware	11.20 ≤ version < 11.22.70
Intel Active Management Technology Firmware	12.0 ≤ version < 12.0.45

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.