CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-5816

CVE-2017-5816: A Remote Code Execution via HPE iMC PLAT 7.3 E0504P04 dbman RestartDB (opcode 10008) allows unauthenticated remote command execution due to improper validation of RestartDB input. The vulnerability affects the dbman component of HP iMC and can execute OS commands as SYSTEM over TCP...

CVE-2017-12526

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

CVE-2017-8982

HPE iMC PLAT 7.3 (E0504P4) contains a Remote Authentication Restriction Bypass vulnerability (CVE-2017-8982). The issue is tied to UrlAccessController in the iMC PLAT, with unauthenticated access potentially enabling privilege escalation. Multiple public advisories document an unauthenticated EL ...

CVE-2017-8983

CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...

CVE-2017-8955

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8957

An RCE vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.2. The flaw exists in the dbman service, which by default listens on TCP port 2810. It results from improper validation of a user-supplied string before it is used to execute a system call, enabling an u...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5793

A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12557

A Remote Code Execution vulnerability in HPE intelligent Management Center iMC PLAT version IMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-12556

CVE-2017-12556 is an RCE vulnerability in HP/HPE Intelligent Management Center (iMC) PLAT, affecting versions up to IMC Plat 7.3 E0504P2 and earlier. The root cause is a deserialization flaw in the MibBrowserTopoFilterServlet that listens on TCP ports 8080/8443 and does not validate untrusted dat...

CVE-2017-8954

CVE-2017-8954 : A remote code execution vulnerability affects HPE Intelligent Management Center (iMC) PLAT 7.2. The issue targets the dbman service (default port 2810) where insufficient input validation allows an attacker to execute arbitrary code with SYSTEM privileges. Documented as a remote, ...

CVE-2017-12541

CVE-2017-12541 : A Remote Code Execution vulnerability affects HPE Intelligent Management Center (iMC) PLAT in version PLAT 7.3 (E0504) . The issue allows an attacker to execute arbitrary code on the affected system; multiple sources corroborate RCE in iMC, including connected advisories. The roo...

CVE-2017-12498

CVE-2017-12498 is a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. The issue affects iMC PLAT version 7.3 (E0504) and is fixed in PLAT v7.3 (E0506) or later. The public description identifies a vulnerability in the HPE iMC PLAT li...

CVE-2017-12509

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5823

CVE-2017-5823 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise iMC PLAT 7.3 E0504P04. The flaw resides in the dbman service (opcode 10013), where a lack of proper validation of a user-supplied string before invoking a system call allows an unauthenticated attacker to execute...

CVE-2017-5817

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-8962

CVE-2017-8962 corresponds to a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory identifies exploitation as a remote code execution flaw in the perfAccessMgrServlet, where insufficient inp...