CVE-2017-5782

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-12530

CVE-2017-12530 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause is an expression-language/JSF injection (eventInfo_content) that allows remote code execution, enabling an attacker to run arbitrary code with SYSTEM privileges. The vulnerabilit...

CVE-2017-5826

CVE-2017-5826 affects HPE Aruba ClearPass Policy Manager 6.6.x. An authenticated remote code execution vulnerability is reported. CNVD notes the vulnerability exists in versions prior to 6.6.5, with remediation to upgrade to 6.6.5 or later. Exploitation details are not provided in the supplied do...

CVE-2017-8971

A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2017-12504

CVE-2017-12504 refers to a remote code execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically affecting version PLAT 7.3 (E0504) and resolved in PLAT 7.3 (E0506) or later. The issue has multiple corroborating sources (NVD/NVD mirror, CNVD, Z...

CVE-2017-8981

HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...

CVE-2017-12558

CVE-2017-12558 is a remote code execution vulnerability in HP/Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting IMC Plat 7.3 E0504P2 and earlier. The issue arises from insecure deserialization in the WebDMServlet, which listens on TCP ports 8080 and 8443. An unauthent...

CVE-2017-5816

CVE-2017-5816: A Remote Code Execution via HPE iMC PLAT 7.3 E0504P04 dbman RestartDB (opcode 10008) allows unauthenticated remote command execution due to improper validation of RestartDB input. The vulnerability affects the dbman component of HP iMC and can execute OS commands as SYSTEM over TCP...

CVE-2017-12533

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12526

CVE-2017-12526 is an RCE in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue allows remote code execution and was addressed in PLAT v7.3 (E0506) or any later version. The NVD entry lists high-severity impact with CVSSv3/3.0 base score 8.8 (network, low attack complexity...

CVE-2017-5806

CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...

CVE-2017-12542

CVE-2017-12542 affects HPE Integrated Lights-Out 4 (iLO 4). The advisory/entries describe an authentication bypass and remote code execution vulnerability in iLO 4 versions prior to 2.53. Exploitation can grant unauthorized administrative access and potential execution of arbitrary code via the i...

CVE-2017-8951

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-5804

CVE-2017-5804 is a remote code execution vulnerability affecting Hewlett Packard Enterprise's Intelligent Management Center (IMC/iMC) Platform version 7.2. The connected sources consistently describe an RCE in IMC/iMC, with varying technical attributions: PRION cites an imcwlandm stack buffer ove...

CVE-2017-8975

CVE-2017-8975 describes a remote code execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance. The public details reference the affected product version v1.20 and identify the exploit surface as the khuploadfile.cgi handler, where improper validation allows u...

CVE-2017-12525

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8983

CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...

CVE-2017-8958

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 and earlier was found...

CVE-2017-12531

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12505

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...