5666 matches found
CVE-2017-5828
CVE-2017-5828 affects HPE Aruba ClearPass Policy Manager, version 6.6.x. Multiple connected records describe an arbitrary command execution vulnerability in this product family. The CNVD entry further states the issue exists in versions prior to 6.6.5, implying a fix in 6.6.5 or later, but the do...
CVE-2017-5828
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5794
HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06: FileUploadServlet is vulnerable to directory traversal due to improper input validation in multipart form-data requests, enabling remote code execution with SYSTEM privileges (authentication may be bypassed).
CVE-2017-12536
CVE-2017-12536 affects HP/HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504); the root cause is a navigationTo.xhtml Expression Language Injection via the beanName parameter, enabling remote code execution. It is fixed in PLAT v7.3 (E0506) or later. The issue allows remote code execution on...
CVE-2017-12487
CVE-2017-12487 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources corroborate an iMC RCE risk affecting PLAT 7.3-era builds, with remediation v...
CVE-2017-12500
CVE-2017-12500 is a remote, unauthenticated RCE in HPE iMC PLAT 7.3 (E0504) via EL Injection (beanName parameter and related pages). Exploitation leads to arbitrary code execution; patched in PLAT v7.3 (E0506) or later (per NVD entry and corroborating exploit references).
CVE-2017-12496
CVE-2017-12496 affects HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The vulnerability enables remote code execution and was fixed in PLAT v7.3 (E0506) or later. Public user-facing details describe an RCE outcome but do not provide concrete exploit steps in the initial document; MITRE...
CVE-2017-12534
CVE-2017-12534 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause, per SRC-2017-0017, is an Expression Language injection in ictExpertCSVDownload.xhtml (beanName handling) that allows code execution with SYSTEM context. It is fixed...
CVE-2017-12524
CVE-2017-12524 is a remote code execution vulnerability in Hewlett Packard Enterprise’s iMC PLAT, affecting PLAT 7.3 (E0504). The issue enables code execution from a network-accessible context with low attack complexity and low privileges, leading to high impact on confidentiality, integrity, and...
CVE-2017-12528
CVE-2017-12528 is a remote code execution vulnerability in HPE iMC PLAT . Affected: PLAT version 7.3 (E0504) ; vulnerability resolved in PLAT v7.3 (E0506) or any later version. The connected SRCINCITE advisory describes the root cause as an Expression Language injection in addVsiInterfaceInfo.xht...
CVE-2017-12549
A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...
CVE-2017-12546
A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...
CVE-2017-12547
CVE-2017-12547 is a local arbitrary command execution vulnerability in HPE System Management Homepage (SMH) for Windows and Linux prior to version 7.6.1. The published details indicate an in-application vulnerability that could allow an attacker with local access to submit a crafted request to SM...
CVE-2017-12540
CVE-2017-12540 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, affecting PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later release. Public references in the connected documents confirm it as ...
CVE-2017-12515
CVE-2017-12515 is a remote code execution vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue is mitigated in PLAT v7.3 (E0506) or any later version. Connected sources indicate multiple public references tyi...
CVE-2017-12508
CVE-2017-12508 affects HPE iMC PLAT 7.3 (E0504); a Remote Code Execution vulnerability was fixed in PLAT 7.3 (E0506) or later. Connected sources also describe an Expression Language/beanName handling flaw in operatorGroupTreeSelectContent.xhtml allowing RCE (ZDI-17-672), requiring authentication ...
CVE-2017-5800
CVE-2017-5800 describes a remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics v3.0 . The issue stems from inadequate input filtering, enabling an attacker to inject and execute arbitrary HTML/JavaScript in a victim’s browser. Impact noted includes the potential thef...
CVE-2017-5815
CVE-2017-5815 corresponds to a remote code execution in HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04. The vulnerability is described in multiple sources as an unspecified flaw allowing remote code execution, with the NVD entry noting critical impact. A patch was released by HPE to ad...
CVE-2017-5787
HPE Version Control Repository Manager (VCRM) before version 7.6 is affected by a remote denial-of-service vulnerability (CVE-2017-5787). The provided documents identify a network-exposed vector and a DoS impact but do not specify a confirmed remediation, patch version, or exploitable details. No...