CVE-2020-5245: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature. The issue has been fixed in...

PT-2020-19450

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the deviceSelect functionality. This allows for potential remote...

PT-2020-19418

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the perfselecttask. This issue may allow for remote code execution...

PT-2020-19433

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the actionSelectContent component. This allows for potential...

PT-2020-19415

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the ifViewSelectPage component. This allows for potential...

PT-2020-19427

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability due to expression language injection in the quickTemplateSelect was discovered. This issue allows for remote code execution...

PT-2020-19409

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the deploySelectSoftware component. This allows for potential...

PT-2020-19410

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the ictexpertcsvdownload component. This allows for potential...

PT-2020-19417

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the selViewNavContent component. This allows for potential remot...

PT-2020-19449

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue. This allows for potential code execution. Recommendations For...

PT-2020-19442

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability due to an expression language injection in the sshconfig was discovered. This issue may allow for remote code execution...

PT-2020-19439

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the thirdpartyperfselecttask. This issue may allow for remote code...

PT-2020-19432

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the template select functionality. This allows for potential...

PT-2020-19419

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A custom template select expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For...

PT-2020-19424

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an operationSelect expression language injection issue. This allows for potential remote code executio...

PT-2020-19407

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A chooseperfview expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For versions pri...

PT-2020-19408

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the deployselectbootrom component. This allows for potential...

PT-2020-19441

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the smsrulesdownload feature. This issue may allow for remote code...

PT-2020-19440

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the ictexpertdownload component. This allows for potential remot...

PT-2020-19414

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the iccselectdevtype component. This allows for potential...