CVE-2020-24649

A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24649

CVE-2020-24649 describes a remote code execution vulnerability in HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07) . The issue stems from input validation of a component referenced as “bytemessageresource transformentity,” enabling a network-accessible, unauthenticated attacke...

CVE-2020-24648

A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24648

CVE-2020-24648 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before version 7.3 (E0705P07). The issue arises from deserialization of the AccessMgrServlet className with untrusted data, enabling remote code execution. Multiple connected documents corroborate the root cause...

CVE-2020-24647

A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24647

CVE-2020-24647 affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue is a vulnerability in the AccessMgrServlet’s classname input validation that can allow remote code execution. Documents do not provide exploit details, affected subcomponents beyond AccessMgrSer...

CVE-2020-24646

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24646. The vulnerability is a stack-based buffer overflow in the tftpserver component that allows remote code execution. The root cause is improper validation of the length of user-supplied data prior to co...

CVE-2020-24646

A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24630

A remote operatoronlinelistcontent privilege escalation vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24630

The CVE-2020-24630 issue affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The ZDI advisory describes a privilege-escalation flaw in the operatorOnlineList_content.xhtml/operatorOnlineList_contentOnly.xhtml endpoints, where sensitive admin-level ...

CVE-2020-24629

CVE-2020-24629 relates to HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue is an authentication bypass in the UrlAccessController servlet caused by insufficient URL filtering, enabling remote attackers to bypass authentication. ZDI details indicate the flaw could enab...

CVE-2020-24629

A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

HPE KVM IP Console Switches Cross-Site Scripting Vulnerability

HPE KVM IP Console Switches is an HP switch device. A cross-site scripting vulnerability exists in HPE KVM IP Console Switches, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack...

CVE-2020-24627

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2020-24628

A remote code injection vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

Code injection

A remote code injection vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

Cross site scripting

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2020-24628

A remote code injection vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2020-24628

CVE-2020-24628 affects HPE KVM IP Console Switches (G2 4x1Ex32) prior to version 2.8.3. The issue is described as a remote code injection vulnerability. Supported documents confirm the affected product family and version range; no root-cause technical details or patch/mitigation are provided in t...

CVE-2020-24627

CVE-2020-24627: A remote stored cross‑site scripting vulnerability affecting HPE KVM IP Console Switches (G2 4x1Ex32) prior to 2.8.3. Documents confirm the vulnerability type (XSS) and affected product/versions, but do not provide concrete root-cause details or explicit exploitation steps. No rem...