CVE-2017-12511

CVE-2017-12511 describes a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue allows code execution and is mitigated by upgrading to PLAT 7.3 (E0506) or any newer version. CVSSv3 base score 8.8 (High) with network attack vector, low...

CVE-2017-12509

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12556

CVE-2017-12556 is an RCE vulnerability in HP/HPE Intelligent Management Center (iMC) PLAT, affecting versions up to IMC Plat 7.3 E0504P2 and earlier. The root cause is a deserialization flaw in the MibBrowserTopoFilterServlet that listens on TCP ports 8080/8443 and does not validate untrusted dat...

CVE-2017-12527

CVE-2017-12527 relates to a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT. Affected product: iMC PLAT version PLAT 7.3 (E0504). Root cause details in the connected sources are not fully enumerated in the provided material, but the vulnerability was a...

CVE-2017-12523

CVE-2017-12523 is a Remote Code Execution in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is resolved in PLAT 7.3 (E0506) or later. Per NVD data, exploitation is possible remotely over the network with no user interaction; impact is high (confidentiality, integrity, availab...

CVE-2017-12554

The CVE-2017-12554 entry concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) Platform (iMC Plat) versions up to 7.3 E0504P2 and earlier. The root cause is a path validation flaw in the mibFileServlet, which handles HTTP(S) ports 8080 and 8443. This lack of proper validation al...

CVE-2017-12556

A Remote Code Execution vulnerability in HPE intelligent Management Center iMC PLAT version IMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-12520

CVE-2017-12520 is a remote code execution vulnerability in HPE Intelligent Management Center PLAT 7.3 (E0504). Fixed in PLAT 7.3 (E0506) or later. CVSSv3: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation context from ZDI-17-684: perfAddorModDeviceMonitor Expression Language Injection leading to ...

CVE-2017-12540

CVE-2017-12540 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, affecting PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later release. Public references in the connected documents confirm it as ...

CVE-2017-12519

CVE-2017-12519 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected component is the iMC PLAT stack; root cause details are not fully disclosed in the pro...

CVE-2017-5793

A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12524

CVE-2017-12524 is a remote code execution vulnerability in Hewlett Packard Enterprise’s iMC PLAT, affecting PLAT 7.3 (E0504). The issue enables code execution from a network-accessible context with low attack complexity and low privileges, leading to high impact on confidentiality, integrity, and...

CVE-2017-12500

CVE-2017-12500 is a remote, unauthenticated RCE in HPE iMC PLAT 7.3 (E0504) via EL Injection (beanName parameter and related pages). Exploitation leads to arbitrary code execution; patched in PLAT v7.3 (E0506) or later (per NVD entry and corroborating exploit references).

CVE-2017-12498

CVE-2017-12498 is a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. The issue affects iMC PLAT version 7.3 (E0504) and is fixed in PLAT v7.3 (E0506) or later. The public description identifies a vulnerability in the HPE iMC PLAT li...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-12517

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

CVE-2017-12535

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12514

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12519

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...