CVE-2020-7174

A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7174

CVE-2020-7174 affects HPE Intelligent Management Center (iMC) before 7.3 (E0705P07). The issue is a soapConfigContent expression language injection that allows remote code execution via the soapConfigContent.xhtml endpoint, manipulating the beanName parameter. Documented exploitation context incl...