CVE-2017-8982

HPE iMC PLAT 7.3 (E0504P4) contains a Remote Authentication Restriction Bypass vulnerability (CVE-2017-8982). The issue is tied to UrlAccessController in the iMC PLAT, with unauthenticated access potentially enabling privilege escalation. Multiple public advisories document an unauthenticated EL ...

CVE-2017-8957

An RCE vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.2. The flaw exists in the dbman service, which by default listens on TCP port 2810. It results from improper validation of a user-supplied string before it is used to execute a system call, enabling an u...

CVE-2017-8955

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8955

CVE-2017-8955 concerns HPE Intelligent Management Center (iMC) PLAT 7.2 with a reported Remote Code Execution vulnerability (per NVD and CVE listings). Connected sources also describe a separate dbman service flaw on iMC that could allow remote/file deletion abuse (ZDI-17-482), indicating multipl...

CVE-2017-12561

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT version Plat 7.3 E0504P4 and earlier was found...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-5815

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-8964

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8966

CVE-2017-8966 is a deserialization of untrusted data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. Several connected sources tie this to the TopoMsgServlet component, where improper validation of deserialized input can enable arbitrary code exec...

CVE-2017-8967

CVE-2017-8967 is a Deserialization of Untrusted Data vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. Connected sources (e.g., ZDI-17-852) describe the flaw as deserialization of untrusted data in the TopoDebugServlet, which listens ...

CVE-2017-8965

CVE-2017-8965 is a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. The issue arises from deserialization in the AccessMgrServlet, enabling remote code execution as described by the ZDI advisory (ZDI-17-851...

CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-12534

CVE-2017-12534 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause, per SRC-2017-0017, is an Expression Language injection in ictExpertCSVDownload.xhtml (beanName handling) that allows code execution with SYSTEM context. It is fixed...

CVE-2017-5806

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5806

CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...

CVE-2017-5805

CVE-2017-5805 concerns HPE Intelligent Management Center (iMC) PLAT 7.2. The vulnerability is a remote code execution flaw in the iMC Server service: a stack-based buffer overflow when processing the UserName field over UDP port 6666, allowing unauthenticated remote attackers to run arbitrary cod...

CVE-2017-12496

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12508

CVE-2017-12508 affects HPE iMC PLAT 7.3 (E0504); a Remote Code Execution vulnerability was fixed in PLAT 7.3 (E0506) or later. Connected sources also describe an Expression Language/beanName handling flaw in operatorGroupTreeSelectContent.xhtml allowing RCE (ZDI-17-672), requiring authentication ...

CVE-2017-12505

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12505

CVE-2017-12505 is an RCE in HPE iMC PLAT 7.3 (E0504) that allows remote code execution via vulnerable handling in iMC’s components; HP fixed it in PLAT v7.3 (E0506) or later. Connected sources (e.g., ZDI-17-668) describe an iccSelectCommand expression language issue that requires authentication (...