CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-8956

Summary: CVE-2017-8956 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT, affecting versions prior to 7.3 E0504P04. The issue arises in the dbman service due to improper validation of user-supplied input, leading to a stack-based buffer overflow that enables...

CVE-2017-12518

CVE-2017-12518 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that can be exploited over the network with low attack complexity and no user interaction; it allows code execution with privileges, and is fixed in PLAT v7.3 (E0506) or later. Some...

CVE-2017-12517

HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains a Remote Code Execution vulnerability that allows an attacker to execute code on vulnerable installations. The issue is due to an injection/processing flaw in iMC’s components, with affected version specified as PLAT 7.3 (E0504) an...

CVE-2017-12555

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...

CVE-2017-12501

CVE-2017-12501 concerns HP/HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) with a remote code execution vulnerability that was fixed in PLAT v7.3 (E0506) or later. The connected ZDI advisory identifies the underlying flaw as an authentication-required remote code execution via improper h...

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-12537

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12522

CVE-2017-12522 is an RCE in HPE iMC PLAT (HP iMC) affecting PLAT 7.3, originally reported as PLAT 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources describe remote code execution that could allow an attacker to run arbitrary code on the target; some d...

CVE-2017-5804

CVE-2017-5804 is a remote code execution vulnerability affecting Hewlett Packard Enterprise's Intelligent Management Center (IMC/iMC) Platform version 7.2. The connected sources consistently describe an RCE in IMC/iMC, with varying technical attributions: PRION cites an imcwlandm stack buffer ove...

CVE-2017-12525

CVE-2017-12525 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). It could allow an unauthenticated or low-privilege network attacker to execute code on the target, as indicated by the CVSS v3 base score 8.8 (HIGH) with NETWORK attack vector and ...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-8982

HPE iMC PLAT 7.3 (E0504P4) contains a Remote Authentication Restriction Bypass vulnerability (CVE-2017-8982). The issue is tied to UrlAccessController in the iMC PLAT, with unauthenticated access potentially enabling privilege escalation. Multiple public advisories document an unauthenticated EL ...

CVE-2017-5818

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-5823

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2016-8525

CVE-2016-8525 is a Remote Disclosure of Information vulnerability in Hewlett Packard Enterprise (HPE) iMC PLAT. Affected: iMC PLAT versions v7.2 E0403P06 and earlier. Impact: confidentiality partial (per CVSS v2) and high (per CVSS v3); no integrity or availability impact stated. Root cause detai...

CVE-2017-12557

A Remote Code Execution vulnerability in HPE intelligent Management Center iMC PLAT version IMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-12531

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12519

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...