CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-12519

CVE-2017-12519 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected component is the iMC PLAT stack; root cause details are not fully disclosed in the pro...

CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...

CVE-2017-12538

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-12537

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12518

CVE-2017-12518 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that can be exploited over the network with low attack complexity and no user interaction; it allows code execution with privileges, and is fixed in PLAT v7.3 (E0506) or later. Some...

CVE-2017-8956

Summary: CVE-2017-8956 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT, affecting versions prior to 7.3 E0504P04. The issue arises in the dbman service due to improper validation of user-supplied input, leading to a stack-based buffer overflow that enables...

CVE-2017-12560

CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...

CVE-2017-12525

CVE-2017-12525 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). It could allow an unauthenticated or low-privilege network attacker to execute code on the target, as indicated by the CVSS v3 base score 8.8 (HIGH) with NETWORK attack vector and ...

CVE-2017-5822

CVE-2017-5822 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P04. The vulnerability resides in the dbman service, where handling of opcode 10010 requests can lead to arbitrary file writes and remote code execution with SYSTEM privileges. Multiple connected advisories describe unau...

CVE-2017-12523

CVE-2017-12523 is a Remote Code Execution in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is resolved in PLAT 7.3 (E0506) or later. Per NVD data, exploitation is possible remotely over the network with no user interaction; impact is high (confidentiality, integrity, availab...

CVE-2017-12558

CVE-2017-12558 is a remote code execution vulnerability in HP/Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting IMC Plat 7.3 E0504P2 and earlier. The issue arises from insecure deserialization in the WebDMServlet, which listens on TCP ports 8080 and 8443. An unauthent...

CVE-2017-12495

CVE-2017-12495 affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is a Remote Code Execution vulnerability exploitable remotely over the network with low privileges and no user interaction, leading to complete confidentiality, integrity, and avail...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-12517

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...