PT-2017-3493

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 Description A Remote Code Execution issue in HPE Intelligent Management Center iMC PLAT is related to the lack of input data sanitization in the dbman service. This allows a remot...

PT-2017-3496

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 Description A Remote Code Execution issue in HPE Intelligent Management Center iMC PLAT is related to the lack of input data sanitization in the dbman service. This allows a remot...

PT-2016-3251

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version 7.3 E0504P2 Description The issue is related to a Remote Code Execution vulnerability. It involves the deserialization of untrusted data in the RMI registry of the HPE Intelligent Management...

HP Intelligent Management Center (iMC) Multiple Vulnerabilities

HP Intelligent Management Center iMC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

H3C / HPE Intelligent Management Center Java Object Deserialization RCE

Binary data hpimccve-2016-4372.nbin...

CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

Design/Logic Flaw

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

CVE-2016-4372

CVE-2016-4372 affects HPE HP iMC suite (PLAT, EAD, APM, NTA, BIMS, UAM_TAM) prior to 7.2 E0403P04/E0405P05/E0401P04/E0401P01/E0402P02/E0405P05. The vulnerability stems from unsafe Java deserialization via the Apache Commons Collections (ACC) library, allowing remote attackers to execute arbitrary...

CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

CVE-2016-4372: Improper Input Validation

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

PT-2016-5918

Name of the Vulnerable Software and Affected Versions HPE iMC PLAT versions prior to 7.2 E0403P04 HPE iMC EAD versions prior to 7.2 E0405P05 HPE iMC APM versions prior to 7.2 E0401P04 HPE iMC NTA versions prior to 7.2 E0401P01 HPE iMC BIMS versions prior to 7.2 E0402P02 HPE iMC UAM TAM versions...

IMC TV - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application IMC TV published at the 'play' market has multiple vulnerabilities...

CVE-2015-6399

CVE-2015-6399 affects Cisco Integrated Management Controller (IMC) 1.0.0.0/1.0.0.1 before 2.0(9). The issue arises from insufficient input sanitization for certain HTTP parameters, enabling an authenticated remote attacker to craft an HTTP request that causes the IMC IP interface to become inacce...

PT-2015-7224

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC versions 1.0.0.0 through 1.0.0.1 Cisco Integrated Management Controller IMC versions prior to 2.09 Description The issue allows remote authenticated users to cause a denial of service, specifically an...

CVE-2015-6259

CVE-2015-6259 affects Cisco Integrated Management Controller (IMC) Supervisor prior to 1.0.0.1 and Cisco UCS Director prior to 5.2.0.1. The JSP component enables remote attackers to overwrite arbitrary files via crafted HTTP requests, a vulnerability tracked as CSCus36435/CSCus62625. The issue is...

PT-2015-7142

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Supervisor versions prior to 1.0.0.1 Cisco UCS Director formerly Cloupia Unified Infrastructure Controller versions prior to 5.2.0.1 Description The issue allows remote attackers to write to arbitrary...

Cisco Patches File Overwrite Bug in IMC Supervisor and UCS Director

Cisco has patched a remote file-overwrite vulnerability in a couple of its products that could allow an attacker to replace arbitrary files and cause target systems to become unstable. The vulnerability affects the Cisco Integrated Management Controlled Supervisor and UCS Director software. The...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in its Integrated Management Controller IMC Supervisor and the UCS Director formally known as Cloupia Unified Infrastructure Controller. Exploitation of these vulnerabilities may allow a remote attacker to gain unauthorized access or...

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Remote File Overwrite Vulnerability

Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director contain a remote file overwrite vulnerability that could allow an unauthenticated, remote attacker to overwrite arbitrary system files, resulting in system instability or a denial of service DoS condition. Cisco has...