PT-2020-19430

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A select expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For versions prior to 7.3...

PT-2020-19429

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the ictexpertcsvdownload component. This allows for potentia...

PT-2020-19453

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the ictexpertcsvdownload component. This allows for potentia...

PT-2020-19446

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the powershellConfigContent. This issue may allow for remote code...

(0Day) Hewlett Packard Enterprise Intelligent Management Center forwardredirect Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

PT-2020-19441

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the smsrulesdownload feature. This issue may allow for remote code...

PT-2020-19419

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A custom template select expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For...

PT-2020-19439

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the thirdpartyperfselecttask. This issue may allow for remote code...

PT-2020-19449

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue. This allows for potential code execution. Recommendations For...

PT-2020-19440

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the ictexpertdownload component. This allows for potential remot...

PT-2020-19407

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A chooseperfview expression language injection remote code execution issue was discovered. This allows for remote code execution. Recommendations For versions pri...

PT-2020-15792

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the SyslogTempletSelectWin component. This issue allows for remote...

PT-2020-15791

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the legend functionality. Recommendations For versions prior to...

PT-2020-15793

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an Expression Language injection issue in the addVsiInterfaceInfo function. This allows for potential remo...

Hewlett Packard Enterprise Intelligent Management Center addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Hewlett Packard Enterprise Intelligent Management Center legend Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

PT-2020-19403

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the addDeviceToView functionality. This allows for potential...

PT-2020-19404

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the eventinfo content. This allows for potential remote code...

PT-2020-19405

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the faultDevParasSet component. This allows for potential remote...

CVE-2020-7799: Improper Neutralization of Special Elements used in an Expression Language Statement

An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates Home - Settings - Email Templates or themes Home - Settings - Themes, can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache...