1085 matches found
Hewlett Packard Enterprise Intelligent Management Center legend Expression Language Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
Hewlett Packard Enterprise Intelligent Management Center addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
Adobe Experience Manager Expression Language Injection Vulnerability
Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An expression language injection vulnerability exists in Adobe Experience Manager 6.5. An attacker can exploit this vulnerability to obtain sensiti...
CVE-2019-16469
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2019-16469
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...
Information disclosure
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2019-16469
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...
Adobe Patches Five Critical Illustrator CC Flaws
Adobe has released patches for five critical vulnerabilities in Adobe Illustrator CC, its popular vector graphics editor tool, which if exploited could enable arbitrary code execution. Overall Adobe patched nine vulnerabilities as part of its regularly-scheduled updates on Tuesday, including five...
Adobe Releases First 2020 Patch Tuesday Software Updates
Adobe today released software updates to patch a total of 9 new security vulnerabilities in two of its widely used applications, Adobe Experience Manager and Adobe Illustrator. It's the first Patch Tuesday for the year 2020 and one of the lightest patch releases in a long time for Adobe users...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5385)
An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient validation of the beanName request parameter in perfSelectTask endpoint.Successful exploitation results in the execution of arbitrary code under the security contex...
CVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language EL injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData...
HPE Intelligent Management Center (IMC) Expression Language Injection Remote Code Execution Vulnerability (CNVD-2019-23746)
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. A GWT perfAddFormServer getAddFormBean expression language injection remote code execution vulnerability...
HPE Intelligent Management Center (IMC) thirdPartyPerfSelectTask Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A thirdPartyPerfSelectTask expression language injection remote code execution vulnerability exists in HPE...
HPE Intelligent Management Center (IMC) faultParasSet Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A faultParasSet expression language injection remote code execution vulnerability exists in HPE Intelligen...
HPE Intelligent Management Center (IMC) reportpage index expression language injection remote code execution vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A reportpage index expression language injection remote code execution vulnerability exists in HPE...
HPE Intelligent Management Center (IMC) viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewTaskResultDetailFact expression language injection remote code execution vulnerability exists in HPE...
HPE Intelligent Management Center (IMC) select expression language injection remote code execution vulnerability (CNVD-2019-23777)
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A select expression language injection remote code execution vulnerability exists in HPE Intelligent...
HPE Intelligent Management Center (IMC) viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewBatchTaskResultDetailFact expression language injection remote code execution vulnerability exists i...
HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A GWT perfSelItemServer getSelItemBean expression language injection remote code execution vulnerability...
HPE Intelligent Management Center (IMC) deviceThresholdConfig expression language injection remote code execution vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A deviceThresholdConfig expression language injection remote code execution vulnerability exists in HPE...