PT-2017-3536

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 Description: A Deserialization of Untrusted Data issue was found, which is related to the perfAccessMgrServlet component. This issue can be exploited by a...

HPE Intelligent Management Center CommonUtils ZIP Directory Traversal (CVE-2017-5793)

A directory traversal vulnerability exist in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on uploaded ZIP files handled by the CommonUtils class. A remote attacker can exploit this vulnerability by sending an HTTP request containing a...

HPE Intelligent Management Center accessMgrServlet Insecure Deserialization (CVE-2017-5790)

An insecure deserialization vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to deserialization of untrusted data by the accessMgrServlet while having vulnerable classes in the code path. A remote, unauthenticated attacker can exploit this vulnerabili...

HPESBHF03743 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS...

PT-2017-3497

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description The issue is related to a buffer overflow on the stack in the imcsyslogdm service of the HPE Intelligent Management Center PLAT platform. This could allow a remote attacke...

HPE Intelligent Management Center FileUploadServlet Directory Traversal (CVE-2017-5794)

A directory traversal vulnerability exist in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on multipart form-data requests in FileUploadServlet. A remote attacker can exploit this vulnerability by sending a maliciously crafted HTTP request...

PT-2017-3524

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version IMC Plat 7.3 E0504P2 and earlier Description: A Remote Code Execution issue was discovered, related to the deserialization of untrusted data in the WebDMDebugServlet component. This allows a remo...

PT-2017-3523

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version IMC Plat 7.3 E0504P2 and earlier Description: A Remote Code Execution issue was discovered, related to the deserialization of untrusted data in the WebDMServlet component. This allows a remote...

PT-2017-3525

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT versions prior to IMC Plat 7.3 E0504P2 Description: The issue is related to the deserialization of untrusted data in the MibBrowserTopoFilterServlet component, which can lead to the recovery of an...

Hewlett Packard Enterprise Intelligent Management Center imcwlandm Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HPE iMC Server service, which listens on...

Hewlett Packard Enterprise Intelligent Management Center imcwlandm SSID Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HPE iMC Server service, which listens on...

Hewlett Packard Enterprise Intelligent Management Center imcwlandm UserName Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HPE iMC Server service, which listens on...

HPESBHF03741 rev.1 - HPE Network products including Comware 7, IMC, and VCX running OpenSSL, Local Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Disclosure of Information

Potential Security Impact: Local: Unauthorized Disclosure of Information; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products Products All versions - Please refer to the RESOLUTION below for ...

PT-2017-3557

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: A Remote Code Execution issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT platform. Exploitation o...

PT-2017-3559

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.2 Description: The issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT software platform. Exploitation of this issue ma...

HPESBHF03738 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5804 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 | |...

PT-2017-3558

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: A Remote Code Execution issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT platform. Exploitation o...

HP Intelligent Management Center SOM Module filePath Information Disclosure

The HP Intelligent Management Center IMC application running on the remote host is affected by an information disclosure vulnerability in the included IMC Service Operation Management SOM module, specifically within the FileDownload servlet, due to improper validation of user-supplied input to th...

HP Intelligent Management Center Information Disclosure Vulnerability

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An information disclosure vulnerability exists in HP IM...

PT-2017-16691

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC SOM version v7.3 E0501 Description A Remote Unauthenticated Disclosure of Information issue was discovered, potentially allowing unauthorized access to sensitive information. The vulnerability is related t...