HPE Intelligent Management Center WmiConfigContent Expression Language Injection (CVE-2017-12526)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient handling of request parameter on wmiConfigContent.xhtml...

HPE Intelligent Management Center Remote Code Execution (CVE-2017-12526) - Ver2

A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-12526

CVE-2017-12526 is an RCE in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue allows remote code execution and was addressed in PLAT v7.3 (E0506) or any later version. The NVD entry lists high-severity impact with CVSSv3/3.0 base score 8.8 (network, low attack complexity...

HPE Intelligent Management Center multiple Expressions Language Injection (CVE-2017-12500; CVE-2017-12526)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient handling of the beanName request parameter on ictExpertDownload.xhtml and on wmiConfigContent.xhtml . A remote, authenticated attacker can exploit this vulnerabilit...