HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability CVE ID CVE-2017-5792 Exploit Vendor Homepage: www.hpe.com Version: iMC PLAT v7.3 E0504 Standard Tested on: Windows Server 2008 R2 Enterprise 64-bit note that this PoC will launch calc.exe $ java -cp ysoserial-0.0.6-SNAPSHOT-all.jar...

CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Technical analysis of CVE-2017-12561, a use-after-free vulnerability in the dbman service of Hewlett Packard Enterprise Intelligent Management Center iMC. Overview The vulnerability affects the service's handling of opcode 10012. Incorrect object...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) in versions prior to v7.3 E0713 . This flaw allows for unauthorized access, potentially impacting confidentiality and integrity with a CVSS v3.1 score of 9.1 . No specific root cause or exploit code is provid...

EUVD-2026-95262

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

PT-2026-108209

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0713 Description An authentication bypass issue exists, which allows an attacker to gain unauthorized access to the system by circumventing the authentication process. Recommendation...

CVE-2026-79842: Missing Authorization

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

HPESBNW05157 rev.1 - HPE Intelligent Management Center (iMC), Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to v7.3 E0713 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-79842 |...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: A null pointer check was added in updateeventsingroup. kasprintf returns a pointer to dynamically allocated memory; this pointer can be NULL in case of failure...

[SECURITY] Fedora 45 Update: libtnc-1.25-53.fc45

This library provides functions for loading and interfacing with loadable IMC Integrity Measurement Collector IMC and Integrity Measurement Verifier IMV modules as required by the Trusted Network Computing TNC IF-IMC and IF-IMV interfaces as described in:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fixed the use of a mutex in the IRQs-disabled section. The current imc-pmu code triggers a warning when CONFIGDEBUGATOMICSLEEP is enabled and CONFIGPROVELOCKING is also enabled, while a threadimc event is running...

Cisco Integrated Management Controller Argument Injection (CVE-2026-20288) (cisco-sa-cimc-arg-inject-upSHdMfU)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...

Cisco Integrated Management Controller Argument Injection (CVE-2026-20200) (cisco-sa-cimc-arg-inject-upSHdMfU)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...

Cisco Integrated Management Controller Cross-Site Scripting (cisco-sa-cimc-xss-7EhBFxBp)

According to its self-reported version, Cisco Integrated Management Controller is affected by a Cross-Site Scripting vulnerability. - A cross-site scripting XSS vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of...

CVE-2026-20288 Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-20200

CVE-2026-20200 concerns Cisco IMC. The weakness is in the web-based management interface, where an authenticated, low-privileged attacker can trigger improper validation of user input to execute arbitrary commands on the underlying OS with root privileges. The issue implies remote exploitation vi...

CVE-2026-20198

The CVE-2026-20198 involves Cisco Integrated Management Controller (IMC) web-based management interface. Affected component: IMC web UI; vulnerability: cross-site scripting (XSS) due to insufficient input validation. Exploitation requires user interaction (phishing-style crafted link) by an authe...

CVE-2026-20198

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An...

CVE-2026-20288: Improper Neutralization of Expression/Command Delimiters

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-20200: Improper Neutralization of Parameter/Argument Delimiters

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...