CVE-2017-12530

CVE-2017-12530 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause is an expression-language/JSF injection (eventInfo_content) that allows remote code execution, enabling an attacker to run arbitrary code with SYSTEM privileges. The vulnerabilit...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-5806

CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-12526

CVE-2017-12526 is an RCE in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue allows remote code execution and was addressed in PLAT v7.3 (E0506) or any later version. The NVD entry lists high-severity impact with CVSSv3/3.0 base score 8.8 (network, low attack complexity...

CVE-2017-12503

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12519

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12491

CVE-2017-12491 affects HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504); a remote code execution vulnerability arises from insufficient handling of a parameter to saveSelectedDevices via GWT RPC, enabling an attacker to execute arbitrary code on the target. The issue is fixed in PLAT v7.3...

CVE-2017-5820

The CVE-2017-5820 issue affects HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 (dbman component). It is a command-injection / remote code execution vulnerability caused by improper validation of user-supplied input when handling BackupZipFile/ opcode commands in dbman, allowing...

CVE-2017-8965

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-12560

A Remote Denial of Service vulnerability in HPE Intelligent Management Center iMC PLAT version iMC Plat 7.3 E0504P2 was found...

CVE-2017-8984

A remote code execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0506P03 was found...

CVE-2017-5819

CVE-2017-5819 affects HPE Intelligent Management Center (iMC) PLAT, specifically the dbman component. The vulnerability enables unauthenticated remote code execution via opcode 10007 in the dbman service (listening by default on TCP port 2810), caused by improper validation of a user-supplied str...

CVE-2017-12488

CVE-2017-12488 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT. The issue affects iMC PLAT version 7.3 (E0504) and is fixed in PLAT 7.3 (E0506) or later. Exploitation would allow an attacker to execute arbitrary code on affected sy...

CVE-2017-12541

CVE-2017-12541 : A Remote Code Execution vulnerability affects HPE Intelligent Management Center (iMC) PLAT in version PLAT 7.3 (E0504) . The issue allows an attacker to execute arbitrary code on the affected system; multiple sources corroborate RCE in iMC, including connected advisories. The roo...

CVE-2017-12514

CVE-2017-12514 affects HPE Intelligent Management Center PLAT 7.3 (E0504). It is a remote code execution vulnerability; the issue is resolved in PLAT 7.3 (E0506) or any later version. Connected documents corroborate multiple related CVEs (CVE-2017-12487..12518) flagged for iMC PLAT, with disclosu...

CVE-2017-12518

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...