CVE-2019-11132: Intel Active Management Technology Firmware

High severity, CVSS 8.4. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access.

Affected products

• Intel Active Management Technology Firmware: from 11.0, before 11.8.70 (fixed in 11.8.70); from 11.10, before 11.11.70 (fixed in 11.11.70); from 11.20, before 11.22.70 (fixed in 11.22.70); from 12.0, before 12.0.45 (fixed in 12.0.45)

Published 2019-12-18. Last modified 2026-06-17.