CVE-2020-24651

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24651. The issue is a syslogTempletSelectWin expression language injection in the SyslogTempletSelectWin.xhtml endpoint, enabling remote code execution with SYSTEM privileges. Exploitation details indicate ...

CVE-2020-24651: Improper Neutralization of Special Elements used in an Expression Language Statement

A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7155: Improper Neutralization of Special Elements used in an Expression Language Statement

A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7153: Improper Neutralization of Special Elements used in an Expression Language Statement

A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7160: Improper Neutralization of Special Elements used in an Expression Language Statement

A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7168: Improper Neutralization of Special Elements used in an Expression Language Statement

A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7142: Improper Neutralization of Special Elements used in an Expression Language Statement

A eventinfocontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7146: Improper Neutralization of Special Elements used in an Expression Language Statement

A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7151: Improper Neutralization of Special Elements used in an Expression Language Statement

A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7193: Improper Neutralization of Special Elements used in an Expression Language Statement

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7150: Improper Neutralization of Special Elements used in an Expression Language Statement

A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7181: Improper Neutralization of Special Elements used in an Expression Language Statement

A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7186: Improper Neutralization of Special Elements used in an Expression Language Statement

A powershellconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24652: Improper Neutralization of Special Elements used in an Expression Language Statement

A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7156: Improper Neutralization of Special Elements used in an Expression Language Statement

A faultinfocontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7148: Improper Neutralization of Special Elements used in an Expression Language Statement

A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7154: Improper Neutralization of Special Elements used in an Expression Language Statement

A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7189: Improper Neutralization of Special Elements used in an Expression Language Statement

A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7179: Improper Neutralization of Special Elements used in an Expression Language Statement

A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7195: Improper Neutralization of Special Elements used in an Expression Language Statement

A iccselectrules expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...