CVE-2017-8967

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8981

HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-5806

CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...

CVE-2017-12526

CVE-2017-12526 is an RCE in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue allows remote code execution and was addressed in PLAT v7.3 (E0506) or any later version. The NVD entry lists high-severity impact with CVSSv3/3.0 base score 8.8 (network, low attack complexity...

CVE-2017-12497

CVE-2017-12497 is a remote code execution vulnerability in HPE iMC PLAT 7.3 (E0504) . The issue allows an attacker with network access and low privileges to execute code with high impact, as indicated by the CVSS metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The problem was resolved in iMC PLAT ...

CVE-2017-5821

CVE-2017-5821 is a remote, unauthenticated command-injection in HPE Intelligent Management Center (iMC) PLAT, dbman service, allowing arbitrary OS command execution via opcode 10006. Affected product/version: iMC PLAT before 7.3 E0504P04. Public details come from ZDI-17-339 and CP AI advisories; ...

CVE-2017-12507

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8962

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-12522

CVE-2017-12522 is an RCE in HPE iMC PLAT (HP iMC) affecting PLAT 7.3, originally reported as PLAT 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources describe remote code execution that could allow an attacker to run arbitrary code on the target; some d...

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-12518

CVE-2017-12518 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that can be exploited over the network with low attack complexity and no user interaction; it allows code execution with privileges, and is fixed in PLAT v7.3 (E0506) or later. Some...

CVE-2017-12503

CVE-2017-12503 affects HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504); a remote code execution vulnerability exists due to an Expression Language injection in the templateSelect endpoint. Remediation: upgrade to PLAT 7.3 (E0506) or later. Several sources (e.g., ZDI-17-666, NVD/NVD mirro...

CVE-2017-8963

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-12522

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12525

CVE-2017-12525 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). It could allow an unauthenticated or low-privilege network attacker to execute code on the target, as indicated by the CVSS v3 base score 8.8 (HIGH) with NETWORK attack vector and ...

CVE-2017-12489

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12516

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12538

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...