PT-2017-16694

Name of the Vulnerable Software and Affected Versions HPE Network Automation versions 9.1x through 10.2x Description A remote SQL information disclosure vulnerability was found, which may allow unauthorized access to sensitive data. Additionally, an authentication bypass vulnerability in the...

HPE Intelligent Management Center CommonUtils ZIP Directory Traversal (CVE-2017-5793)

A directory traversal vulnerability exist in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on uploaded ZIP files handled by the CommonUtils class. A remote attacker can exploit this vulnerability by sending an HTTP request containing a...

HPE Intelligent Management Center accessMgrServlet Insecure Deserialization (CVE-2017-5790)

An insecure deserialization vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to deserialization of untrusted data by the accessMgrServlet while having vulnerable classes in the code path. A remote, unauthenticated attacker can exploit this vulnerabili...

PT-2017-3497

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description The issue is related to a buffer overflow on the stack in the imcsyslogdm service of the HPE Intelligent Management Center PLAT platform. This could allow a remote attacke...

HPE Intelligent Management Center FileUploadServlet Directory Traversal (CVE-2017-5794)

A directory traversal vulnerability exist in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on multipart form-data requests in FileUploadServlet. A remote attacker can exploit this vulnerability by sending a maliciously crafted HTTP request...

PT-2017-3552

Name of the Vulnerable Software and Affected Versions: HPE Network Automation versions 9.1x through 10.2x Description: The issue is related to insufficient protection of the SQL query structure in HPE Network Automation, allowing a remote SQL injection authentication bypass. This can enable a...

PT-2017-3524

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version IMC Plat 7.3 E0504P2 and earlier Description: A Remote Code Execution issue was discovered, related to the deserialization of untrusted data in the WebDMDebugServlet component. This allows a remo...

PT-2017-3523

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version IMC Plat 7.3 E0504P2 and earlier Description: A Remote Code Execution issue was discovered, related to the deserialization of untrusted data in the WebDMServlet component. This allows a remote...

HPESBGN03740 rev.1 - HPE Network Automation, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Code Execution, Elevated Privileges, SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Network Automation Software 9.1x, 9.2x, 10.0x, 10.1x and 10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

PT-2017-3525

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT versions prior to IMC Plat 7.3 E0504P2 Description: The issue is related to the deserialization of untrusted data in the MibBrowserTopoFilterServlet component, which can lead to the recovery of an...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2017-06229)

HPE Intelligent Management Center PLAT is an intelligent management center platform. A remote code execution vulnerability exists in HPE Intelligent Management Center PLAT, which can be exploited by remote attackers to execute arbitrary code...

HPE NonStop Server Sensitive Information Disclosure Vulnerability

HP NonStop Server is a fault-tolerant server that provides comprehensive fault detection and isolation and protects data integrity. A sensitive information disclosure vulnerability exists in HPE NonStop Server. A remote user can exploit this vulnerability with an unspecified flaw in the SSH servi...

HPE Intelligent Management Center FileDownloadServlet fileName Directory Traversal (CVE-2017-5795)

A directory traversal vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on the fileName parameter in FileDownloadServlet. A remote attacker can exploit this vulnerability by sending a maliciously crafted HTTP...

HPE LoadRunner and Performance Center libxdrutil.dll mxdr_string Heap Buffer Overflow (CVE-2017-5789)

A heap buffer overflow vulnerability exists in HP LoadRunner and Performance Center. The vulnerability is due to insufficient validation of the length of XDR encoded string. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable...

H3C / HPE Intelligent Management Center accessMgrServlet Java Object Deserialization RCE

Binary data hpimccve-2017-5790.nbin...

H3C / HPE Intelligent Management Center RMI Java Object Deserialization RCE

The H3C or HPE Intelligent Management Center iMC web server running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialization of Java objects to the Apache Commons BeanUtils library via the euplat RMI registry. An unauthenticated, remote attacker can...

PT-2017-3557

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: A Remote Code Execution issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT platform. Exploitation o...

PT-2017-3559

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.2 Description: The issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT software platform. Exploitation of this issue ma...

PT-2017-3558

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: A Remote Code Execution issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT platform. Exploitation o...

HPESBNS03735 rev.1 - HPE NonStop Servers using SSH Service, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA - SSH Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...