CVE-2019-5341

CVE-2019-5341 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT; all versions earlier than 7.3 E0506P09 are vulnerable. Multiple sources describe a remote code execution via SyslogTempletSelectWin expression language handling (CNVD/CNVD-2019-23697 and ZDI-19-166). The ro...

CVE-2019-5341

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5340

CVE-2019-5340 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, earlier than 7.3 E0506P09. The connected advisories describe a remote code execution flaw via an actionSelectContent expression language injection in the IMC web interface (actionSelectContent.xhtml) that c...

CVE-2019-5340

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5339

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5338

Summary of CVE-2019-5338 from connected sources: HPE Intelligent Management Center (IMC) Platform, affected up to version 7.3 E0506P09, is reported vulnerable due to an Expression Language injection in addVsiInterfaceInfo handling. The specific flaw lies in processing the beanName parameter in ad...

CVE-2019-5338

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2018-7125

CVE-2018-7125 is a remote code execution flaw in HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 . The issue stems from a PrimeFaces Expression Language injection in IMC that allows an attacker to execute code remotely. Documented impact states an attacker could run arb...

CVE-2018-7123

A remote denial of service vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2018-7123

CVE-2018-7123 is a remote denial-of-service vulnerability in HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 . Multiple sources describe an unauthenticated remote DoS triggered via dbman/related commands (e.g., a crafted 10014 request), potentially causing the affected ...

CVE-2018-7122

CVE-2018-7122 affects HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09, presenting a remote information-disclosure vulnerability. The connected documents consistently identify IMC as the affected product and indicate that the issue allows remote disclosure without requir...

CVE-2018-7121

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5392

CVE-2019-5392 affects HPE Intelligent Management Center (IMC) PLAT releases prior to 7.3 E0506P09. The issue is an information-disclosure vulnerability in the dbman component (command 10001), where improper validation allows an unauthenticated remote attacker to view potentially sensitive informa...

CVE-2019-5392

A disclosure of information vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5393

CVE-2019-5393 affects HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09, with remote code execution described. The connected documents consistently describe IMC 7.3 E0506P09 and earlier versions as affected, but do not provide explicit root-cause details or a formal remed...

CVE-2018-7114

HPE/iMC (HP/H3C Intelligent Management Center) PLAT before 7.3 E0605P06 is vulnerable to a stack-based buffer overflow in the dbman component when processing decryption/requests, leading to remote code execution or crashes. Affected product: iMC PLAT versions prior to 7.3 E0605P06. Root cause: im...

CVE-2018-7102

HPE Intelligent Management Center (iMC) PLAT E0506P09 contains a directory traversal vulnerability in the imciccdm component (function createFabricAutoCfgFile). The issue arises from insufficient filtering of user-supplied paths before file operations, enabling remote attackers to modify or creat...

CVE-2018-7102

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

CVE-2018-7074

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version...

Cross site scripting

A remote cross-site scripting XSS vulnerability was identified in HPE Intelligent Management Center iMC PLAT version v7.3 E0506. The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version...