CVE-2017-5816

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-5820

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-5790

A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-8957

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8980

A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8967

CVE-2017-8967 is a Deserialization of Untrusted Data vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. Connected sources (e.g., ZDI-17-852) describe the flaw as deserialization of untrusted data in the TopoDebugServlet, which listens ...

CVE-2017-8955

CVE-2017-8955 concerns HPE Intelligent Management Center (iMC) PLAT 7.2 with a reported Remote Code Execution vulnerability (per NVD and CVE listings). Connected sources also describe a separate dbman service flaw on iMC that could allow remote/file deletion abuse (ZDI-17-482), indicating multipl...

CVE-2017-8982

A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P4 was found...

CVE-2017-8961

The CVE-2017-8961 issue affects HPE Intelligent Management Center (IMC) PLAT versions around 7.3 (E0504P02 and related builds), where a directory traversal flaw in the flexFileUpload/FileUploadServlet path handling can enable remote code execution. The root cause is lack of proper validation of u...

CVE-2017-12515

CVE-2017-12515 is a remote code execution vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue is mitigated in PLAT v7.3 (E0506) or any later version. Connected sources indicate multiple public references tyi...

CVE-2017-12529

CVE-2017-12529 affects Hewlett Packard Enterprise iMC PLAT (HPE iMC PLAT 7.3). The root cause is an Expression Language Injection in the devGroupSelect feature (beanName handling in devGroupSelect.jsf), allowing remote code execution. The vulnerability is a remote, network-exploitable issue with ...

CVE-2017-12527

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12528

CVE-2017-12528 is a remote code execution vulnerability in HPE iMC PLAT . Affected: PLAT version 7.3 (E0504) ; vulnerability resolved in PLAT v7.3 (E0506) or any later version. The connected SRCINCITE advisory describes the root cause as an Expression Language injection in addVsiInterfaceInfo.xht...

CVE-2017-12503

CVE-2017-12503 affects HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504); a remote code execution vulnerability exists due to an Expression Language injection in the templateSelect endpoint. Remediation: upgrade to PLAT 7.3 (E0506) or later. Several sources (e.g., ZDI-17-666, NVD/NVD mirro...

CVE-2017-12538

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8981

HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...

CVE-2017-8967

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8962

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8963

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...