Lucene search
K

1085 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/01/29 12:0 a.m.26 views

Hewlett Packard Enterprise Intelligent Management Center legend Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

8.8CVSS3.2AI score0.06613EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/29 12:0 a.m.23 views

Hewlett Packard Enterprise Intelligent Management Center addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

8.8CVSS3AI score0.06707EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/17 12:0 a.m.2 views

Adobe Experience Manager Expression Language Injection Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An expression language injection vulnerability exists in Adobe Experience Manager 6.5. An attacker can exploit this vulnerability to obtain sensiti...

7.5CVSS7.2AI score0.17186EPSS
Exploits0References1
OSV
OSV
added 2020/01/15 5:15 p.m.4 views

CVE-2019-16469

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

7.5CVSS7.2AI score0.17186EPSS
Exploits0References1
NVD
NVD
added 2020/01/15 5:15 p.m.26 views

CVE-2019-16469

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

7.5CVSS7.4AI score0.17186EPSS
Exploits0References1
Prion
Prion
added 2020/01/15 5:15 p.m.29 views

Information disclosure

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

5CVSS7.1AI score0.17186EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/15 4:15 p.m.25 views

CVE-2019-16469

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

7.4AI score0.17186EPSS
Exploits0References1
ThreatPost
ThreatPost
added 2020/01/14 3:42 p.m.151 views

Adobe Patches Five Critical Illustrator CC Flaws

Adobe has released patches for five critical vulnerabilities in Adobe Illustrator CC, its popular vector graphics editor tool, which if exploited could enable arbitrary code execution. Overall Adobe patched nine vulnerabilities as part of its regularly-scheduled updates on Tuesday, including five...

9.3CVSS1.1AI score0.17186EPSS
Exploits1References6
The Hacker News
The Hacker News
added 2020/01/14 2:52 p.m.4 views

Adobe Releases First 2020 Patch Tuesday Software Updates

Adobe today released software updates to patch a total of 9 new security vulnerabilities in two of its widely used applications, Adobe Experience Manager and Adobe Illustrator. It's the first Patch Tuesday for the year 2020 and one of the lightest patch releases in a long time for Adobe users...

6.3AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2019/11/25 12:0 a.m.3 views

HPE Intelligent Management Center Remote Code Execution (CVE-2019-5385)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient validation of the beanName request parameter in perfSelectTask endpoint.Successful exploitation results in the execution of arbitrary code under the security contex...

9CVSS2.8AI score0.0364EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2019/10/11 10:8 a.m.29 views

CVE-2018-14667

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language EL injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData...

9.8CVSS5.4AI score0.74171EPSS
Exploits6References2
CNVD
CNVD
added 2019/06/06 12:0 a.m.3 views

HPE Intelligent Management Center (IMC) Expression Language Injection Remote Code Execution Vulnerability (CNVD-2019-23746)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. A GWT perfAddFormServer getAddFormBean expression language injection remote code execution vulnerability...

10CVSS8.6AI score0.08107EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.3 views

HPE Intelligent Management Center (IMC) thirdPartyPerfSelectTask Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A thirdPartyPerfSelectTask expression language injection remote code execution vulnerability exists in HPE...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.3 views

HPE Intelligent Management Center (IMC) faultParasSet Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A faultParasSet expression language injection remote code execution vulnerability exists in HPE Intelligen...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.2 views

HPE Intelligent Management Center (IMC) reportpage index expression language injection remote code execution vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A reportpage index expression language injection remote code execution vulnerability exists in HPE...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.2 views

HPE Intelligent Management Center (IMC) viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewTaskResultDetailFact expression language injection remote code execution vulnerability exists in HPE...

10CVSS8.6AI score0.08107EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.3 views

HPE Intelligent Management Center (IMC) select expression language injection remote code execution vulnerability (CNVD-2019-23777)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A select expression language injection remote code execution vulnerability exists in HPE Intelligent...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.3 views

HPE Intelligent Management Center (IMC) viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewBatchTaskResultDetailFact expression language injection remote code execution vulnerability exists i...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.2 views

HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A GWT perfSelItemServer getSelItemBean expression language injection remote code execution vulnerability...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/06 12:0 a.m.3 views

HPE Intelligent Management Center (IMC) deviceThresholdConfig expression language injection remote code execution vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A deviceThresholdConfig expression language injection remote code execution vulnerability exists in HPE...

9CVSS8.6AI score0.0364EPSS
Exploits0References1
Rows per page
Query Builder