CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-12489

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12507

HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains a Remote Code Execution vulnerability leading to high-severity impact. The issue is resolved in PLAT v7.3 (E0506) or any later version. Stay on or upgrade to the fixed release to mitigate the vulnerability.

CVE-2017-12523

CVE-2017-12523 is a Remote Code Execution in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is resolved in PLAT 7.3 (E0506) or later. Per NVD data, exploitation is possible remotely over the network with no user interaction; impact is high (confidentiality, integrity, availab...

CVE-2016-8530

A remote denial of service vulnerability exists in HPE iMC PLAT , a suite of network intelligent management center solutions from Hewlett Packard Enterprise. The flaw affects versions v7.2 E0403P06 and earlier and can be exploited by a remote attacker to disrupt the service. The issue was resolve...

CVE-2017-5821

CVE-2017-5821 is a remote, unauthenticated command-injection in HPE Intelligent Management Center (iMC) PLAT, dbman service, allowing arbitrary OS command execution via opcode 10006. Affected product/version: iMC PLAT before 7.3 E0504P04. Public details come from ZDI-17-339 and CP AI advisories; ...

CVE-2017-5822

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-12519

CVE-2017-12519 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected component is the iMC PLAT stack; root cause details are not fully disclosed in the pro...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-12505

CVE-2017-12505 is an RCE in HPE iMC PLAT 7.3 (E0504) that allows remote code execution via vulnerable handling in iMC’s components; HP fixed it in PLAT v7.3 (E0506) or later. Connected sources (e.g., ZDI-17-668) describe an iccSelectCommand expression language issue that requires authentication (...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-12541

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5818

CVE-2017-5818 affects HPE iMC PLAT (H3C-branded) v7.3 E0504P04. The flaw is in the dbman service handling opcode 10007, allowing an unauthenticated remote attacker to delete arbitrary files with SYSTEM privileges (arbitrary file deletion). Affected product is described in the connected documents;...

CVE-2017-8984

CVE-2017-8984 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P03. Multiple sources (NVD, CVE lists, CNVD) describe a remote code execution vulnerability in iMC PLAT, enabling an attacker to run commands with SYSTEM/root privileges and potentially write or delete arbitrary files. CV...

CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-8981

HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...

CVE-2017-12523

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12517

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...

CVE-2017-12507

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...