Remote code execution

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version...

Design/Logic Flaw

A potential security vulnerability has been identified in HPE Intelligent Management Center Platform IMC Plat 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote directory traversal leading to arbitrary file deletion...

CVE-2018-7092

CVE-2018-7092 (IMC Plat 7.3 E0506P09) : The ZDI advisory details a remote, unauthenticated directory traversal flaw in the TFTP server of Hewlett Packard Enterprise Intelligent Management Center (IMC Plat), allowing deletion of arbitrary files accessible to the Administrator user. The vulnerabili...

CVE-2018-7092

A potential security vulnerability has been identified in HPE Intelligent Management Center Platform IMC Plat 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote directory traversal leading to arbitrary file deletion...

CVE-2018-7074

HPE Intelligent Management Center PLAT 7.3 E0506P07 contains a stack-based buffer overflow in the tftpserver handling of the m_pkg_LimitSize parameter, allowing remote code execution with SYSTEM privileges. The issue can be exploited without authentication; successful exploitation could run arbit...

CVE-2017-8990

CVE-2017-8990 affects Hewlett Packard Enterprise iMC Wireless Service Manager (WSM) Software prior to 7.3 E0506. The root cause is improper validation of the length of user-submitted data, leading to a remote code execution on vulnerable installations. Some sources describe a stack-based buffer o...

CVE-2018-7075

A remote cross-site scripting (XSS) vulnerability exists in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506. An attacker could inject arbitrary Web script or HTML via the iMC PLAT interface. The issue is fixed in iMC PLAT 7.3 E0605P04 or a later version. Affected product: HPE iMC P...

CVE-2017-8990

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Service Manager WSM Software earlier than version WSM 7.3 E0506. This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version...

CVE-2017-8990: Undefined Security Weakness

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Service Manager WSM Software earlier than version WSM 7.3 E0506. This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version...

CVE-2018-7075: Improper Neutralization of Input During Web Page Generation

A remote cross-site scripting XSS vulnerability was identified in HPE Intelligent Management Center iMC PLAT version v7.3 E0506. The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version...

CVE-2018-7074: Undefined Security Weakness

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version...

imc-math.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-650555 Description| Value ---|--- Affected Website:| imc-math.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HPESBNW03862 rev.1 - HPE intelligence Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to iMC PLAT 7.3 E0605P04 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7076 |...

CVE-2018-13180

CVE-2018-13180 affects the IMM Coin (IMC) Ethereum token. The mintToken function contains an integer overflow that lets the contract owner set any user’s balance to an arbitrary value, compromising balances and token integrity. The documents do not provide exploitation status or official remediat...

Security Bulletin: TS3000 (TSSC/IMC) is affected by two issues for glibc (CVE-2015-1781, CVE-2013-7423 )

Summary The Total Storage System Console/TS4500 Integrated Management Console is affected by two vulnerabilities in the glibc library. Vulnerability Details CVEID: CVE-2013-7423 DESCRIPTION: GNU glibc could allow a local attacker to obtain sensitive information, caused by the writing of DNS queri...

Security Bulletin: Vulnerability in IBM Java Runtime affects TSSC/IMC (TS3000) (CVE-2015-0138)

Summary The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM® Runtime Environment Java™ Technology Edition, Version 1.7 that is used by TSSC/IMC Vulnerability Details CVEID: CVE-2015-0138 DESCRIPTION: A vulnerability in various IBM SSL/TLS...

Cisco Integrated Management Controller Supervisor Software and UCS Director Software Cross-Site Scripting Vulnerability

Cisco Integrated Management Controller IMC Supervisor Software and UCS Director Software are both products of Cisco Corporation.Cisco Integrated Management Controller IMC Supervisor Software is a set of tools for managing UCS Unified Computing System. Cisco Integrated Management Controller IMC...

imc-math.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-621068 Description| Value ---|--- Affected Website:| imc-math.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

imc.com.jo XSS vulnerability

Open Bug Bounty ID: OBB-607268 Description| Value ---|--- Affected Website:| imc.com.jo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HPE Intelligent Management Center Remote Code Execution (CVE-2017-12490) - Ver2

A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...