HPE Intelligent Management Center (iMC) devicethresholdconfig expression language injection remote code execution vulnerability (CNVD-2020-58764)

HPE Intelligent Management Center is a suite of network intelligence management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

CVE-2020-7192

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected. The vulnerability is in the deviceThresholdConfig expression language handling (beanName parameter), where improper input validation enables remote code execution in the context of SYSTEM. Public advisories (e.g., ZDI...

CVE-2020-7192: Improper Neutralization of Special Elements used in an Expression Language Statement

A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

PT-2020-19452

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center versions prior to 7.3 E0705P07 Description A remote code execution vulnerability was discovered due to an expression language injection in the deviceThresholdConfig. This issue may allow for remote code...

PT-2019-12599

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified, related to an Expression Language Injection in the deviceThresholdConfig. This allows for remote code execution...