CVE-2017-12533

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-12497

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8963

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8962

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-12518

CVE-2017-12518 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that can be exploited over the network with low attack complexity and no user interaction; it allows code execution with privileges, and is fixed in PLAT v7.3 (E0506) or later. Some...

CVE-2017-5821

CVE-2017-5821 is a remote, unauthenticated command-injection in HPE Intelligent Management Center (iMC) PLAT, dbman service, allowing arbitrary OS command execution via opcode 10006. Affected product/version: iMC PLAT before 7.3 E0504P04. Public details come from ZDI-17-339 and CP AI advisories; ...

CVE-2017-12525

CVE-2017-12525 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). It could allow an unauthenticated or low-privilege network attacker to execute code on the target, as indicated by the CVSS v3 base score 8.8 (HIGH) with NETWORK attack vector and ...

CVE-2017-12497

CVE-2017-12497 is a remote code execution vulnerability in HPE iMC PLAT 7.3 (E0504) . The issue allows an attacker with network access and low privileges to execute code with high impact, as indicated by the CVSS metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The problem was resolved in iMC PLAT ...

CVE-2017-12522

CVE-2017-12522 is an RCE in HPE iMC PLAT (HP iMC) affecting PLAT 7.3, originally reported as PLAT 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources describe remote code execution that could allow an attacker to run arbitrary code on the target; some d...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-12489

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12493

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12560

CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...

CVE-2017-12538

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12501

CVE-2017-12501 concerns HP/HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) with a remote code execution vulnerability that was fixed in PLAT v7.3 (E0506) or later. The connected ZDI advisory identifies the underlying flaw as an authentication-required remote code execution via improper h...

CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-12495

CVE-2017-12495 affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is a Remote Code Execution vulnerability exploitable remotely over the network with low privileges and no user interaction, leading to complete confidentiality, integrity, and avail...

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...