259 matches found
Remote code execution
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11980
A remote code exection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11977
CVE-2019-11977 affects Hewlett Packard Enterprise’s Intelligent Management Center (IMC) PLAT, with vulnerability in the readListBySql path that constructs SQL queries without proper validation. This SQL injection can lead to remote code execution on IMC installations, affecting versions earlier t...
CVE-2019-11977
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11975
HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09 is affected by CVE-2019-11975 due to a SQL injection in the queryOptionInfosByIp handler, allowing remote code execution. Root cause: improper validation of user-supplied input used to construct SQL queries. Impact: potential arbitr...
CVE-2019-11971
CVE-2019-11971 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, prior to 7.3 E0506P09. Root cause is an SQL injection in the isAccountBindingWithOperator path that can lead to remote code execution. The flaw enables an attacker to execute arbitrary code with SYSTEM pri...
CVE-2019-11969
HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a ForwardRedirect expression language injection that enables remote code execution via the ForwardRedirect.xhtml endpoint (actionbean parameter). The vulnerability, confirmed across multiple sources, c...
CVE-2019-11969
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11968
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11967
CVE-2019-11967 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT builds prior to 7.3 E0506P09. Connected sources describe a remote code execution vulnerability in the ConfFileResource renameFile handling, enabling an attacker to execute arbitrary code with System context...
CVE-2019-11985
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11966
HPE Intelligent Management Center (IMC) PLAT earlier than 7.3 E0506P09 contains a remote privilege escalation vulnerability. The root cause is that operatorOnlineList_contentOnly stores sensitive information in clear text, enabling an attacker to escalate privileges on vulnerable IMC installation...
CVE-2019-11965
CVE-2019-11965 affects Hewlett Packard Enterprise’s IMC PLAT prior to 7.3 E0506P09. The vulnerability is a deviceThresholdConfig expression language injection that can lead to remote code execution . The issue arises in handling of the beanName parameter in deviceThresholdConfig.xhtml, enabling a...
CVE-2019-11965
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11964
The CVE-2019-11964 issue affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT pre-7.3 E0506P09, where the iccSelectDeviceSeries expression language handling permits remote code execution. Red Hat and CNVD entries confirm RCE in IMC, tied to iccSelectDeviceSeries and its bea...
CVE-2019-11963
CVE-2019-11963 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform, prior to version 7.3 E0506P09. The root cause is a deploySelectBootrom Expression Language Injection vulnerability in IMC, leading to remote code execution. Multiple sources confirm that an attacker co...
CVE-2019-11963
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11960
HPE Intelligent Management Center (IMC) PLAT, affected in versions earlier than 7.3 E0506P09, is vulnerable to a remote code execution through select expression language injection. The root cause involves improper handling of the beanName parameter in the select.xhtml endpoint, enabling an attack...