CVE-2020-7141

Vulnerability: HPE Intelligent Management Center (iMC) prior to 7.3 (E0705P07) is affected by a remote code execution through adddevicetoview Expression Language Injection. Root cause (per ZDI): improper handling/validation of the beanName parameter in addDeviceToView.xhtml, enabling arbitrary co...

CVE-2020-7141: Improper Neutralization of Special Elements used in an Expression Language Statement

A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

PT-2020-19403

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the addDeviceToView functionality. This allows for potential...

HPE Intelligent Management Center (IMC) addDeviceToViews Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An addDeviceToView expression language injection remote code execution vulnerability exists in HPE...

PT-2019-17611

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified, potentially allowing for code execution. The vulnerability may be related to an Expression Language Injection...