CVE-2020-7161

A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7157

A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7156

HPE iMC (Intelligent Management Center)

CVE-2020-7155

A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7153

CVE-2020-7153 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue is an iccselectdevtype expression language injection in iccSelectDevType handling, enabling remote code execution. Exploitation is remote (attack vector NETWORK) with no us...

CVE-2020-7151

A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7150

A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7150

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-7150, a faultStatChooseFaultType expression language injection leading to remote code execution. The vulnerability resides in how the beanName parameter is handled in the faultStatChooseFaultType.xhtml endp...

CVE-2020-7149

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7147

A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7145

A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7144

A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7142

The CVE-2020-7142 issue affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). A vulnerability in the eventInfo_content.xhtml endpoint allows expression-language injection in the eventinfo_content parameter, enabling remote code execution. Affected comp...

CVE-2020-7141

Vulnerability: HPE Intelligent Management Center (iMC) prior to 7.3 (E0705P07) is affected by a remote code execution through adddevicetoview Expression Language Injection. Root cause (per ZDI): improper handling/validation of the beanName parameter in addDeviceToView.xhtml, enabling arbitrary co...

CVE-2020-7141

A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24651

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24651. The issue is a syslogTempletSelectWin expression language injection in the SyslogTempletSelectWin.xhtml endpoint, enabling remote code execution with SYSTEM privileges. Exploitation details indicate ...

CVE-2020-24650

The CVE-2020-24650 issue affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). It is a legend expression language injection vulnerability in the legend.xhtml handling of the beanName parameter, enabling remote code execution. Exploitation is described as network-based with...

CVE-2020-7192: Improper Neutralization of Special Elements used in an Expression Language Statement

A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7143: Improper Neutralization of Special Elements used in an Expression Language Statement

A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7169: Improper Neutralization of Special Elements used in an Expression Language Statement

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...