CVE-2017-5805

CVE-2017-5805 concerns HPE Intelligent Management Center (iMC) PLAT 7.2. The vulnerability is a remote code execution flaw in the iMC Server service: a stack-based buffer overflow when processing the UserName field over UDP port 6666, allowing unauthenticated remote attackers to run arbitrary cod...

CVE-2017-5802

CVE-2017-5802 is described in the connected FreeBSD VuXML entry as a vulnerability in LibRaw, specifically the kodak_radc_load_raw() function in internal/dcraw_common.cpp, where the buf variable can trigger an out-of-bounds read and crash the process. No exploitation details or fixes are provided...

CVE-2017-5800

A Remote Cross-Site Scripting XSS vulnerability in HPE Operations Bridge Analytics version v3.0 was found...

CVE-2017-5813

A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5814

A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5798

CVE-2017-5798 is an RCE vulnerability in HPE OpenCall Media Platform (OCMP). Affected are OCMP versions prior to 3.4.2 RP201 (OCMP 3.x) and all versions prior to 4.4.7 RP702 (OCMP 4.x). Exploitation details appear in external advisories and exploits (e.g., Exploit-DB and SSD advisory), but the pr...

CVE-2017-5819

CVE-2017-5819 affects HPE Intelligent Management Center (iMC) PLAT, specifically the dbman component. The vulnerability enables unauthenticated remote code execution via opcode 10007 in the dbman service (listening by default on TCP port 2810), caused by improper validation of a user-supplied str...

CVE-2017-5824

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5823

CVE-2017-5823 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise iMC PLAT 7.3 E0504P04. The flaw resides in the dbman service (opcode 10013), where a lack of proper validation of a user-supplied string before invoking a system call allows an unauthenticated attacker to execute...

CVE-2017-5811

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-8985

CVE-2017-8985 concerns HPE XP Storage using Hitachi Global Link Manager (HGLM). The affected stack is HGLM versions 6.3.0-00 through 8.5.2-00. The vulnerability is described as a local authenticated information disclosure vulnerability, with access limited to the local attacker (no user interacti...

CVE-2017-8978

CVE-2017-8978 corresponds to a Remote Unauthorized Disclosure of Information vulnerability affecting HPE IceWall MFA 4.0 proxy (and related IceWall products per CNVD), as described in NVD. The entry notes disclosure of information with a network-accessible path, low integrity/availability impact,...

CVE-2017-8947

The CVE-2017-8947 entry concerns Hewlett Packard Enterprise Universal CMDB (UCMDB). Reports confirm a remote code execution vulnerability in UCMDB where the UploadFileOnUIServerServlet handles user-supplied paths insecurely, enabling arbitrary code execution. Affected product versions include UCM...

CVE-2017-8944

The CVE-2017-8944 entry relates to Hewlett Packard Enterprise Cloud Optimizer v3.0x and is substantiated by multiple sources including ZDI-17-365. The issue is a Remote Disclosure of Information caused by missing validation in the DownloadServlet, allowing an attacker to disclose sensitive files....

CVE-2017-8944

A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found...

CVE-2017-8965

CVE-2017-8965 is a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. The issue arises from deserialization in the AccessMgrServlet, enabling remote code execution as described by the ZDI advisory (ZDI-17-851...

CVE-2017-12503

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12560

A Remote Denial of Service vulnerability in HPE Intelligent Management Center iMC PLAT version iMC Plat 7.3 E0504P2 was found...

CVE-2017-12561

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT version Plat 7.3 E0504P4 and earlier was found...

CVE-2017-5815

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...