CVE-2017-12508

CVE-2017-12508 affects HPE iMC PLAT 7.3 (E0504); a Remote Code Execution vulnerability was fixed in PLAT 7.3 (E0506) or later. Connected sources also describe an Expression Language/beanName handling flaw in operatorGroupTreeSelectContent.xhtml allowing RCE (ZDI-17-672), requiring authentication ...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-12526

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-5821

CVE-2017-5821 is a remote, unauthenticated command-injection in HPE Intelligent Management Center (iMC) PLAT, dbman service, allowing arbitrary OS command execution via opcode 10006. Affected product/version: iMC PLAT before 7.3 E0504P04. Public details come from ZDI-17-339 and CP AI advisories; ...

CVE-2017-12541

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12538

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-5816

CVE-2017-5816: A Remote Code Execution via HPE iMC PLAT 7.3 E0504P04 dbman RestartDB (opcode 10008) allows unauthenticated remote command execution due to improper validation of RestartDB input. The vulnerability affects the dbman component of HP iMC and can execute OS commands as SYSTEM over TCP...

CVE-2017-12560

CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...

CVE-2016-8530

A remote Denial of Service vulnerability affects HPE iMC PLAT versions v7.2 E0403P06 and earlier . The issue is resolved in iMC PLAT 7.3 E0504 or later. Connected sources describe a DoS condition with a fixed version; no additional exploitation details are provided in the available documents.

CVE-2017-12534

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5818

CVE-2017-5818 affects HPE iMC PLAT (H3C-branded) v7.3 E0504P04. The flaw is in the dbman service handling opcode 10007, allowing an unauthenticated remote attacker to delete arbitrary files with SYSTEM privileges (arbitrary file deletion). Affected product is described in the connected documents;...

CVE-2017-12519

CVE-2017-12519 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected component is the iMC PLAT stack; root cause details are not fully disclosed in the pro...

CVE-2017-5804

CVE-2017-5804 is a remote code execution vulnerability affecting Hewlett Packard Enterprise's Intelligent Management Center (IMC/iMC) Platform version 7.2. The connected sources consistently describe an RCE in IMC/iMC, with varying technical attributions: PRION cites an imcwlandm stack buffer ove...

CVE-2017-12517

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12516

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12523

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12493

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12507

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...