CVE-2019-11137: HPE Apollo 4200 GEN10 Server Firmware

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected products

• HPE Apollo 4200 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Apollo 4200 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant BL460C GEN10 Server Blade Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant BL460C GEN9 Server Blade Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant BL660C GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL120 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL120 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL160 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL160 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL180 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL180 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL360 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL360 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL380 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL380 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL560 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL560 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL580 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL580 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL60 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL80 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant e910 Server Blade Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant ML110 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant ML110 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant ML150 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• and 259 more

Published 2019-11-14. Last modified 2026-10-08.