1406 matches found
CVE-2017-12560
CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...
CVE-2017-12520
CVE-2017-12520 is a remote code execution vulnerability in HPE Intelligent Management Center PLAT 7.3 (E0504). Fixed in PLAT 7.3 (E0506) or later. CVSSv3: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation context from ZDI-17-684: perfAddorModDeviceMonitor Expression Language Injection leading to ...
CVE-2017-5815
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...
CVE-2017-12501
CVE-2017-12501 concerns HP/HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) with a remote code execution vulnerability that was fixed in PLAT v7.3 (E0506) or later. The connected ZDI advisory identifies the underlying flaw as an authentication-required remote code execution via improper h...
CVE-2017-12506
CVE-2017-12506 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that is fixed in PLAT 7.3 (E0506) or later. Connected sources (e.g., ZDI-17-669) corroborate an RCE in iMC with network access as the attack vector; CVSSv3 base 8.8 (HIGH) wi...
CVE-2017-8961
A directory traversal vulnerability in HPE Intelligent Management Center IMC PLAT 7.3 E0504P02 could allow remote code execution...
CVE-2017-12511
CVE-2017-12511 describes a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue allows code execution and is mitigated by upgrading to PLAT 7.3 (E0506) or any newer version. CVSSv3 base score 8.8 (High) with network attack vector, low...
CVE-2017-5792
CVE-2017-5792 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P2. The issue is a Java deserialization flaw in the euplat RMI registry that allows unauthenticated remote code execution via specially crafted serialized data, leveraging CommonsBeanutils. Public references (Exploit DB,...
CVE-2017-8954
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...
CVE-2017-12495
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-8967
CVE-2017-8967 is a Deserialization of Untrusted Data vulnerability affecting Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. Connected sources (e.g., ZDI-17-852) describe the flaw as deserialization of untrusted data in the TopoDebugServlet, which listens ...
CVE-2017-12489
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-5804
CVE-2017-5804 is a remote code execution vulnerability affecting Hewlett Packard Enterprise's Intelligent Management Center (IMC/iMC) Platform version 7.2. The connected sources consistently describe an RCE in IMC/iMC, with varying technical attributions: PRION cites an imcwlandm stack buffer ove...
CVE-2017-5795
CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...
CVE-2017-12513
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-5795
A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...
CVE-2017-8964
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...
CVE-2017-12494
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-5805
CVE-2017-5805 concerns HPE Intelligent Management Center (iMC) PLAT 7.2. The vulnerability is a remote code execution flaw in the iMC Server service: a stack-based buffer overflow when processing the UserName field over UDP port 6666, allowing unauthenticated remote attackers to run arbitrary cod...