CVE-2020-7147

A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7147

CVE-2020-7147 describes a remote code execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) before platform release 7.3 (E0705P07). The root cause is an expression-language injection in the deploySelectBootrom handling (beanName parameter) that allows an attacker to execut...

HPE IMC deploySelectBootrom Remote Code Execution

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter provided to the deploySelectBootrom.xhtml endpoint. A remote attacker could exploit this vulnerability by sending a...