CVE-2020-7147

A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7147

CVE-2020-7147 describes a remote code execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) before platform release 7.3 (E0705P07). The root cause is an expression-language injection in the deploySelectBootrom handling (beanName parameter) that allows an attacker to execut...

CVE-2020-7147: Improper Neutralization of Special Elements used in an Expression Language Statement

A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

HPE IMC deploySelectBootrom Remote Code Execution

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter provided to the deploySelectBootrom.xhtml endpoint. A remote attacker could exploit this vulnerability by sending a...

PT-2020-19408

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection issue in the deployselectbootrom component. This allows for potential...

PT-2019-12597

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified, potentially allowing for code execution. The vulnerability involves an Expression Language Injection in the...