CVE-2017-12520

CVE-2017-12520 is a remote code execution vulnerability in HPE Intelligent Management Center PLAT 7.3 (E0504). Fixed in PLAT 7.3 (E0506) or later. CVSSv3: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation context from ZDI-17-684: perfAddorModDeviceMonitor Expression Language Injection leading to ...

CVE-2017-12499

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12511

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12509

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5793

A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5823

CVE-2017-5823 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise iMC PLAT 7.3 E0504P04. The flaw resides in the dbman service (opcode 10013), where a lack of proper validation of a user-supplied string before invoking a system call allows an unauthenticated attacker to execute...

CVE-2017-5817

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-5820

The CVE-2017-5820 issue affects HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 (dbman component). It is a command-injection / remote code execution vulnerability caused by improper validation of user-supplied input when handling BackupZipFile/ opcode commands in dbman, allowing...

CVE-2017-12561

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT version Plat 7.3 E0504P4 and earlier was found...

CVE-2017-12489

CVE-2017-12489 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting PLAT 7.3 (E0504). The issue is exploitable remotely over the network with low attack complexity and no user interaction, potentially compromising confidentiali...

CVE-2017-12539

CVE-2017-12539 corresponds to a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting PLAT 7.3 (E0504). The fixed version is PLAT v7.3 (E0506) or later. Connected technical details identify another related vulnerability class: an Expression Langua...

CVE-2017-12541

CVE-2017-12541 : A Remote Code Execution vulnerability affects HPE Intelligent Management Center (iMC) PLAT in version PLAT 7.3 (E0504) . The issue allows an attacker to execute arbitrary code on the affected system; multiple sources corroborate RCE in iMC, including connected advisories. The roo...

CVE-2017-12527

CVE-2017-12527 relates to a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT. Affected product: iMC PLAT version PLAT 7.3 (E0504). Root cause details in the connected sources are not fully enumerated in the provided material, but the vulnerability was a...

CVE-2017-12531

CVE-2017-12531 describes a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is tied to an Expression Language Injection in the faultDevParasSet endpoint, enabling an attacker to execute arbitrary code o...

CVE-2017-5816: Improper Input Validation

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-5806: Improper Input Validation

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8955: Improper Input Validation

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8963: Deserialization of Untrusted Data

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8982: Undefined Security Weakness

A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P4 was found...