CVE-2017-5793

A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5826

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-8964

CVE-2017-8964 concerns a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. The issue is tied to TopoBroadcastServlet, enabling remote code execution through deserialization of untrusted data. The ZDI advisor...

CVE-2016-8518

A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...

CVE-2017-12487

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5783

CVE-2017-5783 describes a remote clickjacking vulnerability affecting HPE Matrix Operating Environment (MEO) v7.6 (and SIM 7.6 per CNVD). The root cause involves a clickjacking weakness that could allow a remote attacker to hijack click-to-operate sessions. Exploit specifics, affected subcomponen...

CVE-2017-12514

CVE-2017-12514 affects HPE Intelligent Management Center PLAT 7.3 (E0504). It is a remote code execution vulnerability; the issue is resolved in PLAT 7.3 (E0506) or any later version. Connected documents corroborate multiple related CVEs (CVE-2017-12487..12518) flagged for iMC PLAT, with disclosu...

CVE-2017-5783

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5792

CVE-2017-5792 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P2. The issue is a Java deserialization flaw in the euplat RMI registry that allows unauthenticated remote code execution via specially crafted serialized data, leveraging CommonsBeanutils. Public references (Exploit DB,...

CVE-2017-5825

CVE-2017-5825 affects HPE Aruba ClearPass Policy Manager 6.6.x. The connected sources describe a privilege-escalation vulnerability in this product, with CVSS v3 base score 8.8 (HIGH), network attack vector, low required privileges, and no user interaction. CNVD-2017-08803 specifies the issue exi...

CVE-2017-8979

CVE-2017-8979 affects HPE Integrated Lights-Out 2 (iLO 2) firmware. Multiple connected sources describe a remote vulnerability in iLO 2 that can be exploited to bypass authentication, execute arbitrary code, and cause denial of service. The Tenable/Nessus plugin references show an instance in iLO...

CVE-2017-12524

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5812

A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2016-8511

CVE-2016-8511 is a remote code execution in HP Network Automation via RPCServlet Java deserialization. The flaw allows sending crafted serialized data to RPCServlet to execute arbitrary code. Affected versions include HP Network Automation 9.1x, 9.2x, and 10.00.x before 10.00.021; 10.10.x before ...

CVE-2017-12508

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12520

CVE-2017-12520 is a remote code execution vulnerability in HPE Intelligent Management Center PLAT 7.3 (E0504). Fixed in PLAT 7.3 (E0506) or later. CVSSv3: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation context from ZDI-17-684: perfAddorModDeviceMonitor Expression Language Injection leading to ...

CVE-2016-8511

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found...

CVE-2017-5809

CVE-2017-5809 is associated with HP Data Protector (versions < 8.17 and

CVE-2016-8515

A remote malicious file upload vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

CVE-2017-5790

CVE-2017-5790 is a remote deserialization vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06 . The flaw exists in the accessMgrServlet and allows unauthenticated remote code execution by deserializing untrusted data. Multiple sources (ZDI-17-166, CNVD-2017-02625, NVD entry...