PT-2018-4126

Name of the Vulnerable Software and Affected Versions IBM Flex System x222 servers with firmware versions 1.00 through 3.56 Description The issue allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration of the Trusted Platfo...

CVE-2014-0881: Improper Access Control

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

PT-2018-4127

Name of the Vulnerable Software and Affected Versions Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems affected versions not specified Description The issue allows remote authenticated users to obtain sensitive account information vi...

CVE-2017-3774

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...

PT-2018-7266

Name of the Vulnerable Software and Affected Versions: Integrated Management Module 2 IMM2 versions earlier than 4.70 Integrated Management Module 2 IMM2 versions earlier than 6.60 Description: A stack overflow issue was found in the web administration service. It can be triggered by providing a...

CVE-2017-3774: Improper Restriction of Operations within the Bounds of a Memory Buffer

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...

Cisco UCS Director Software and Cisco Integrated Management Controller Supervisor Software Cross-Site Request Forgery Vulnerability

Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software are both products of Cisco Corporation.Cisco UCS Director Software is a suite of Cisco Integrated Management Controller IMC Supervisor Software is a set of tools for managing UCS Unified Computing Syste...

CVE-2018-0148

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected...

PT-2018-8645

Name of the Vulnerable Software and Affected Versions: Cisco UCS Director Software affected versions not specified Cisco Integrated Management Controller IMC Supervisor Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an...

CVE-2018-0148: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected...

CVE-2016-8530

A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

CVE-2017-3768

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x. Flooding the IMM2 with a high volume of authentication failures via the Common Information Model CIM used ...

Cross-site Scripting Vulnerability in JP1/Service Support and JP1/Integrated Management - Service Support

Overview A cross-site scripting vulnerability was found in JP1/Service Support and JP1/Integrated Management - Service Support. Impact Remote users can exploit this vulnerability to execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official countermeasur...

CVE-2017-5791

The doFilter method in UrlAccessController in HPE Intelligent Management Center iMC PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI...

Cisco Integrated Management Controller User Session Hijacking Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Remote Code Execution Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Privilege Escalation Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Hijacked Session Vulnerability

Cisco Integrated Management Controller IMC is the U.S. Cisco Cisco company a set of tools for the management of the UCS Unified Computing System, which supports HTTP, SSH access, etc., and can be on the server, shutdown and reboot operations. A security vulnerability exists in the session...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

The Cisco Integrated Management Controller is the baseboard management controller that provides embedded server management for Cisco UCS C-Series Rack Servers. Cisco Integrated Management Controller IMC has a security vulnerability in the web-based GUI that can be exploited by remote attackers to...