CVE-2017-5805

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-12509

CVE-2017-12509 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is addressed in PLAT v7.3 (E0506) or later. Connected sources confirm the vulnerability allows code execution on affected iMC PLAT deploy...

CVE-2017-5797

The CVE-2017-5797 entry concerns HP/ Hewlett Packard Enterprise Intelligent Management Center (IMC) SOM module, specifically the FileDownloadServlet. The issue is an information-disclosure vulnerability caused by improper validation of the user-supplied filePath parameter, enabling remote attacke...

CVE-2017-12539

CVE-2017-12539 corresponds to a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting PLAT 7.3 (E0504). The fixed version is PLAT v7.3 (E0506) or later. Connected technical details identify another related vulnerability class: an Expression Langua...

CVE-2017-8983

CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...

CVE-2017-12540

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12510

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12533

The CVE-2017-12533 issue affects HPE Intelligent Management Center (iMC) PLAT, specifically PLAT 7.3 (E0504) with a Remote Code Execution vulnerability resolved in PLAT v7.3 (E0506) or later. Connected sources identify a broader family of RCE flaws in iMC PLAT related to an Expression Language/be...

CVE-2017-12527

CVE-2017-12527 relates to a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT. Affected product: iMC PLAT version PLAT 7.3 (E0504). Root cause details in the connected sources are not fully enumerated in the provided material, but the vulnerability was a...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03951)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

HPE Intelligent Management Center PLAT Information Disclosure Vulnerability

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An information disclosure vulnerabilit...

Hewlett Packard Enterprise Intelligent Management Center RMI Registry Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the euplat RMI registry. The issue results fr...

Hewlett Packard Enterprise Intelligent Management Center UrlAccessController Authentication Bypass Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center Smart Connect with Wireless Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

Hewlett Packard Enterprise Intelligent Management Center dbman Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within dbman.exe. The issue results from the lack of...

Hewlett Packard Enterprise Intelligent Management Center operatorOnlineList_contentOnly Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The...

HPE iMC dbman RestartDB Unauthenticated Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestartDB Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packard...

HPE iMC - dbman 'RestartDB' Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestartDB Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packard...

HPE iMC dbman RestartDB Unauthenticated Remote Command Execution Exploit

This Metasploit module exploits a remote command execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restart a user-specified database instance OpCode 10008, however the instance ...

HP Intelligent Management Center dbman opcode 10008 command injection

Added: 12/14/2017 CVE: CVE-2017-5816 BID: 98469 Background HP Intelligent Management Center IMC, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. Problem A remote, unauthenticated attacker could...

HP Intelligent Management Center dbman opcode 10008 command injection

Added: 12/14/2017 CVE: CVE-2017-5816 BID: 98469 Background HP Intelligent Management Center IMC, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. Problem A remote, unauthenticated attacker could...