5719 matches found
CVE-2020-24651
HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24651. The issue is a syslogTempletSelectWin expression language injection in the SyslogTempletSelectWin.xhtml endpoint, enabling remote code execution with SYSTEM privileges. Exploitation details indicate ...
CVE-2020-24650
A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24650
The CVE-2020-24650 issue affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). It is a legend expression language injection vulnerability in the legend.xhtml handling of the beanName parameter, enabling remote code execution. Exploitation is described as network-based with...
CVE-2020-24649
A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24649
CVE-2020-24649 describes a remote code execution vulnerability in HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07) . The issue stems from input validation of a component referenced as “bytemessageresource transformentity,” enabling a network-accessible, unauthenticated attacke...
CVE-2020-24648
A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24648
CVE-2020-24648 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before version 7.3 (E0705P07). The issue arises from deserialization of the AccessMgrServlet className with untrusted data, enabling remote code execution. Multiple connected documents corroborate the root cause...
CVE-2020-24647
A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24647
CVE-2020-24647 affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue is a vulnerability in the AccessMgrServlet’s classname input validation that can allow remote code execution. Documents do not provide exploit details, affected subcomponents beyond AccessMgrSer...
CVE-2020-24646
HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24646. The vulnerability is a stack-based buffer overflow in the tftpserver component that allows remote code execution. The root cause is improper validation of the length of user-supplied data prior to co...
CVE-2020-24646
A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24630
A remote operatoronlinelistcontent privilege escalation vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24630
The CVE-2020-24630 issue affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The ZDI advisory describes a privilege-escalation flaw in the operatorOnlineList_content.xhtml/operatorOnlineList_contentOnly.xhtml endpoints, where sensitive admin-level ...
CVE-2020-24629
CVE-2020-24629 relates to HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue is an authentication bypass in the UrlAccessController servlet caused by insufficient URL filtering, enabling remote attackers to bypass authentication. ZDI details indicate the flaw could enab...
CVE-2020-24629
A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
HPE KVM IP Console Switches Cross-Site Scripting Vulnerability
HPE KVM IP Console Switches is an HP switch device. A cross-site scripting vulnerability exists in HPE KVM IP Console Switches, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack...
CVE-2020-24627
A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...
CVE-2020-24628
A remote code injection vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...
