CVE-2019-5367

HPE Intelligent Management Center (IMC) PLAT is affected for versions earlier than 7.3 E0506P09, with remote code execution. Public sources (ZDI) describe exploitation via an insecure configuration with default credentials in the web service (MyFaces ViewState issue), enabling arbitrary code exec...

CVE-2019-5365

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5365

CVE-2019-5365 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The root cause is a deviceSelect expression language injection that allows remote code execution. Impact is remote code execution with HIGH severity; authenticated access is required but can be bypassed per ...

CVE-2019-5363

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5363

The CVE-2019-5363 entry affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. Multiple connected sources describe a remote code execution vulnerability in IMC, caused by an Expression Language injection in the GWT deviceservice (saveSelectedDevices) pa...

CVE-2019-5362

HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 is affected by CVE-2019-5362. The connected sources describe a TopoDebugServlet expression language injection in IMC that allows remote code execution. The vulnerability exists in the way serialized objects are handled by ...

CVE-2019-5361

CVE-2019-5361 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The issue stems from a faultParasSet expression language injection in IMC (7.3 E0506P09 and earlier), allowing an attacker t...

CVE-2019-5360

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a remote code execution via perfAddorModDeviceMonitor Expression Language Injection. The flaw is in handling of the beanName parameter, enabling arbitrary code execution in the context of SYSTEM; accor...

CVE-2019-5359

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5359

CVE-2019-5359 is a remote code execution vulnerability in HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09. The issue arises from a select expression language injection in IMC’s select.xhtml endpoint, where the beanName parameter is not properly validated. Exploitat...

CVE-2019-5358

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5357

HPE Intelligent Management Center (IMC) PLAT vulnerable versions prior to 7.3 E0506P09 contain a FileUploadServlet flaw that enables remote code execution. Multiple sources describe an unrestricted file upload path in IMC, allowing an attacker to upload arbitrary files and execute code in the con...

CVE-2019-5356

HPE IMC PLAT (HPE Intelligent Management Center) has a remote code execution vulnerability tracked as CVE-2019-5356 in versions earlier than 7.3 E0506P09. Exploitation details in connected sources point to a path traversal/remote code execution arising from insecure handling in the CommonUtils un...

CVE-2019-5355

CVE-2019-5355 (HPE iMC) is a remote DoS in the iMC dbman component caused by improper validation of user-supplied data. An unauthenticated attacker could send crafted commands (notably 10003, and 10014 can trigger denial or restart of the dbman process) to disrupt service. Affected product/versio...

CVE-2019-5355

A remote denial of service vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5354

CVE-2019-5354 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform, with remote code execution in IMC versions earlier than 7.3 E0506P09. Related sources describe an expression language injection flaw in IMC’s GWT perfInsListServer and associated servlet logic (getInsLi...

CVE-2019-5353

CVE-2019-5353 affects HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 due to a reportpage index expression language injection in IMC. The flaw can lead to remote code execution with network access and no user interaction, as described by multiple sources (ZDI). Real-wor...

CVE-2019-5352

CVE-2019-5352 is an RCE vulnerability in HPE Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The Red Hat/CNVD/CVE listings and ZDI report describe a GWT-based expression language injection in the perfAddFormServer servlet (beanName parameter) that allows re...

CVE-2019-5351

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5350

CVE-2019-5350 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The Red Hat, CNVD, CNVD-like entries corroborate a remote code execution via deserialization in TopoDebugServlet, treated as an untrusted data deserialization vulnerability that could allow an attacker to ex...