CVE-2019-5355: HPE Intelligent Management Center remote denial of service via expression language injection

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityUnauthenticated remote availability impact on management infrastructure with a high EPSS score, though no confirmed in-the-wild exploitation is documented.

What it is

HPE Intelligent Management Center (IMC) PLAT before version 7.3 E0506P09 contains a remote denial of service flaw tied to expression language injection (CWE-917). An unauthenticated network attacker can disrupt the platform, which matters because IMC is management infrastructure that many other network devices depend on.

Impact

An attacker can cause a denial of service against the IMC platform, degrading or halting management and monitoring of the managed network. The CVSS vector shows availability impact only, with no confidentiality or integrity loss.

Attack surface

Reachable over the network with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. The description does not specify which interface or endpoint is targeted.

Exploitation

Not listed in CISA KEV and no public exploit or exploitation tag appears in the references, which are vendor advisories only. EPSS is high at roughly 0.54 (99th percentile), indicating elevated predicted likelihood of exploitation activity.

What to do

• Upgrade HPE Intelligent Management Center PLAT to version 7.3 E0506P09 or later, per the vendor advisory.
• Restrict network access to IMC management interfaces to trusted administrative networks and block exposure to the internet.
• Monitor the vendor advisory page for updated guidance and any revised fixed builds.
• Segment IMC from general user networks so a DoS against it does not cascade to managed devices.

Detection

• Alert on IMC service crashes, restarts or unavailability events and correlate them with inbound network connections.
• Baseline and monitor request rates and payload patterns to IMC web endpoints for expression-language style input.
• Review IMC and host logs for repeated failed or anomalous requests from single sources preceding outages.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.