1698 matches found
CVE-2017-12513
CVE-2017-12513 is an RCE in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is user-controlled input escaping in iMC PLAT’s components, leading to remote code execution. The vulnerability is addressed in PLAT v7.3 (E0506) or later. Related sources (ZDI-1...
CVE-2017-12521
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-8961
The CVE-2017-8961 issue affects HPE Intelligent Management Center (IMC) PLAT versions around 7.3 (E0504P02 and related builds), where a directory traversal flaw in the flexFileUpload/FileUploadServlet path handling can enable remote code execution. The root cause is lack of proper validation of u...
CVE-2017-12517
HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains a Remote Code Execution vulnerability that allows an attacker to execute code on vulnerable installations. The issue is due to an injection/processing flaw in iMC’s components, with affected version specified as PLAT 7.3 (E0504) an...
CVE-2017-8961
A directory traversal vulnerability in HPE Intelligent Management Center IMC PLAT 7.3 E0504P02 could allow remote code execution...
CVE-2017-12505
CVE-2017-12505 is an RCE in HPE iMC PLAT 7.3 (E0504) that allows remote code execution via vulnerable handling in iMC’s components; HP fixed it in PLAT v7.3 (E0506) or later. Connected sources (e.g., ZDI-17-668) describe an iccSelectCommand expression language issue that requires authentication (...
CVE-2017-12538
CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...
CVE-2017-12561
CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...
CVE-2017-12560
CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...
CVE-2017-8954
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...
CVE-2017-12537
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-12523
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-12493
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-12489
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-8980
CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...
CVE-2017-5821
CVE-2017-5821 is a remote, unauthenticated command-injection in HPE Intelligent Management Center (iMC) PLAT, dbman service, allowing arbitrary OS command execution via opcode 10006. Affected product/version: iMC PLAT before 7.3 E0504P04. Public details come from ZDI-17-339 and CP AI advisories; ...
CVE-2017-8981
HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...
CVE-2017-12507
HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains a Remote Code Execution vulnerability leading to high-severity impact. The issue is resolved in PLAT v7.3 (E0506) or any later version. Stay on or upgrade to the fixed release to mitigate the vulnerability.
CVE-2017-8956
Summary: CVE-2017-8956 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT, affecting versions prior to 7.3 E0504P04. The issue arises in the dbman service due to improper validation of user-supplied input, leading to a stack-based buffer overflow that enables...