1406 matches found
CVE-2017-12523
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-8983
CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...
CVE-2017-12495
CVE-2017-12495 affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is a Remote Code Execution vulnerability exploitable remotely over the network with low privileges and no user interaction, leading to complete confidentiality, integrity, and avail...
CVE-2017-5816
CVE-2017-5816: A Remote Code Execution via HPE iMC PLAT 7.3 E0504P04 dbman RestartDB (opcode 10008) allows unauthenticated remote command execution due to improper validation of RestartDB input. The vulnerability affects the dbman component of HP iMC and can execute OS commands as SYSTEM over TCP...
CVE-2017-12521
CVE-2017-12521 is a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) . The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected software/versions and the exact root cause are described in the CVE entry; the connected sources cor...
CVE-2017-5822
CVE-2017-5822 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P04. The vulnerability resides in the dbman service, where handling of opcode 10010 requests can lead to arbitrary file writes and remote code execution with SYSTEM privileges. Multiple connected advisories describe unau...
CVE-2017-12512
CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...
CVE-2016-8530
A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...
CVE-2017-12515
CVE-2017-12515 is a remote code execution vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue is mitigated in PLAT v7.3 (E0506) or any later version. Connected sources indicate multiple public references tyi...
CVE-2017-12517
HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains a Remote Code Execution vulnerability that allows an attacker to execute code on vulnerable installations. The issue is due to an injection/processing flaw in iMC’s components, with affected version specified as PLAT 7.3 (E0504) an...
CVE-2017-12560
CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...
CVE-2017-12520
CVE-2017-12520 is a remote code execution vulnerability in HPE Intelligent Management Center PLAT 7.3 (E0504). Fixed in PLAT 7.3 (E0506) or later. CVSSv3: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation context from ZDI-17-684: perfAddorModDeviceMonitor Expression Language Injection leading to ...
CVE-2017-5806
CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...
CVE-2017-5815
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...
CVE-2017-12501
CVE-2017-12501 concerns HP/HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) with a remote code execution vulnerability that was fixed in PLAT v7.3 (E0506) or later. The connected ZDI advisory identifies the underlying flaw as an authentication-required remote code execution via improper h...
CVE-2017-12506
CVE-2017-12506 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that is fixed in PLAT 7.3 (E0506) or later. Connected sources (e.g., ZDI-17-669) corroborate an RCE in iMC with network access as the attack vector; CVSSv3 base 8.8 (HIGH) wi...
CVE-2017-8961
A directory traversal vulnerability in HPE Intelligent Management Center IMC PLAT 7.3 E0504P02 could allow remote code execution...
CVE-2017-12511
CVE-2017-12511 describes a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue allows code execution and is mitigated by upgrading to PLAT 7.3 (E0506) or any newer version. CVSSv3 base score 8.8 (High) with network attack vector, low...
CVE-2017-5792
CVE-2017-5792 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P2. The issue is a Java deserialization flaw in the euplat RMI registry that allows unauthenticated remote code execution via specially crafted serialized data, leveraging CommonsBeanutils. Public references (Exploit DB,...