CVE-2017-8982

HPE iMC PLAT 7.3 (E0504P4) contains a Remote Authentication Restriction Bypass vulnerability (CVE-2017-8982). The issue is tied to UrlAccessController in the iMC PLAT, with unauthenticated access potentially enabling privilege escalation. Multiple public advisories document an unauthenticated EL ...

CVE-2017-8957

An RCE vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.2. The flaw exists in the dbman service, which by default listens on TCP port 2810. It results from improper validation of a user-supplied string before it is used to execute a system call, enabling an u...

CVE-2017-8955

CVE-2017-8955 concerns HPE Intelligent Management Center (iMC) PLAT 7.2 with a reported Remote Code Execution vulnerability (per NVD and CVE listings). Connected sources also describe a separate dbman service flaw on iMC that could allow remote/file deletion abuse (ZDI-17-482), indicating multipl...

CVE-2017-12558

CVE-2017-12558 is a remote code execution vulnerability in HP/Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting IMC Plat 7.3 E0504P2 and earlier. The issue arises from insecure deserialization in the WebDMServlet, which listens on TCP ports 8080 and 8443. An unauthent...

CVE-2017-12561

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT version Plat 7.3 E0504P4 and earlier was found...

CVE-2017-5819

CVE-2017-5819 affects HPE Intelligent Management Center (iMC) PLAT, specifically the dbman component. The vulnerability enables unauthenticated remote code execution via opcode 10007 in the dbman service (listening by default on TCP port 2810), caused by improper validation of a user-supplied str...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-5815

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-8964

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-8966

CVE-2017-8966 is a deserialization of untrusted data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. Several connected sources tie this to the TopoMsgServlet component, where improper validation of deserialized input can enable arbitrary code exec...

CVE-2017-8967

CVE-2017-8967 is a Deserialization of Untrusted Data vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. Connected sources (e.g., ZDI-17-852) describe the flaw as deserialization of untrusted data in the TopoDebugServlet, which listens ...

CVE-2017-8965

CVE-2017-8965 is a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. The issue arises from deserialization in the AccessMgrServlet, enabling remote code execution as described by the ZDI advisory (ZDI-17-851...

CVE-2017-12557

CVE-2017-12557 is an RCE in Hewlett Packard Enterprise HP iMC (HPE iMC) WebDMDebugServlet. Public records identify the vulnerability as insecure/deserialization that can be triggered remotely (no authentication) via standard ports (8080/8443), affecting iMC Plat 7.3 E0504P2 and earlier. Exploitat...

CVE-2017-12518

CVE-2017-12518 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that can be exploited over the network with low attack complexity and no user interaction; it allows code execution with privileges, and is fixed in PLAT v7.3 (E0506) or later. Some...

CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-12534

CVE-2017-12534 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause, per SRC-2017-0017, is an Expression Language injection in ictExpertCSVDownload.xhtml (beanName handling) that allows code execution with SYSTEM context. It is fixed...

CVE-2017-5806

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5806

CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...

CVE-2017-5805

CVE-2017-5805 concerns HPE Intelligent Management Center (iMC) PLAT 7.2. The vulnerability is a remote code execution flaw in the iMC Server service: a stack-based buffer overflow when processing the UserName field over UDP port 6666, allowing unauthenticated remote attackers to run arbitrary cod...

CVE-2017-5797

The CVE-2017-5797 entry concerns HP/ Hewlett Packard Enterprise Intelligent Management Center (IMC) SOM module, specifically the FileDownloadServlet. The issue is an information-disclosure vulnerability caused by improper validation of the user-supplied filePath parameter, enabling remote attacke...