CVE-2017-12495

CVE-2017-12495 affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is a Remote Code Execution vulnerability exploitable remotely over the network with low privileges and no user interaction, leading to complete confidentiality, integrity, and avail...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...

CVE-2017-12541

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-12517

HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains a Remote Code Execution vulnerability that allows an attacker to execute code on vulnerable installations. The issue is due to an injection/processing flaw in iMC’s components, with affected version specified as PLAT 7.3 (E0504) an...

CVE-2017-12528

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-12493

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12533

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12530

CVE-2017-12530 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause is an expression-language/JSF injection (eventInfo_content) that allows remote code execution, enabling an attacker to run arbitrary code with SYSTEM privileges. The vulnerabilit...

CVE-2017-12497

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-12501

CVE-2017-12501 concerns HP/HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) with a remote code execution vulnerability that was fixed in PLAT v7.3 (E0506) or later. The connected ZDI advisory identifies the underlying flaw as an authentication-required remote code execution via improper h...

CVE-2017-5818

CVE-2017-5818 affects HPE iMC PLAT (H3C-branded) v7.3 E0504P04. The flaw is in the dbman service handling opcode 10007, allowing an unauthenticated remote attacker to delete arbitrary files with SYSTEM privileges (arbitrary file deletion). Affected product is described in the connected documents;...

CVE-2017-5820

The CVE-2017-5820 issue affects HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 (dbman component). It is a command-injection / remote code execution vulnerability caused by improper validation of user-supplied input when handling BackupZipFile/ opcode commands in dbman, allowing...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12496

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12510

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12508

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12531

CVE-2017-12531 describes a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is tied to an Expression Language Injection in the faultDevParasSet endpoint, enabling an attacker to execute arbitrary code o...