CVE-2020-7194

The CVE-2020-7194 entry concerns a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) where the perfAddorModDeviceMonitor.xhtml endpoint parses the beanName parameter insecurely, allowing an expression language injection that can lead to remote code execution. The iss...

CVE-2020-7193

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7193

CVE-2020-7193 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The vulnerability is an ictExpertCSVDownload.xhtml beanName parameter handling issue, enabling an expression-language injection that leads to remote code execution. The root cause is...

CVE-2020-7192

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected. The vulnerability is in the deviceThresholdConfig expression language handling (beanName parameter), where improper input validation enables remote code execution in the context of SYSTEM. Public advisories (e.g., ZDI...

CVE-2020-7191

A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7191

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by a devSoftSel expression language injection leading to remote code execution. The root cause is improper handling/validation of the beanName parameter in the devSoftSel.xhtml endpoint, allowing an attacker to execute...

CVE-2020-7190

A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7190

CVE-2020-7190 : In HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07), a deviceselect expression language injection allows remote code execution. The flaw stems from handling of the beanName parameter in deviceSelect.xhtml, enabling an attacker to run arbitrary code with SYSTEM ...

CVE-2020-7189

CVE-2020-7189 refers to a remote code execution vulnerability in Hewlett Packard Enterprise HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue stems from the faultFlashEventSelectFact expression language handling of the beanName parameter, allowing injection that can ex...

CVE-2020-7189

A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7188

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-7188, a userselectpagingcontent expression language injection that enables remote code execution. The vulnerability centers on the beanName parameter handling in the userSelectPagingContent.xhtml endpoint, ...

CVE-2020-7187

A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7187

CVE-2020-7187 describes a remote code execution in HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The flaw is a reportpage index expression language injection in the index.xhtml handling of overTopForm:actionInput, where unsanitized input can be rendered with SYSTEM-level p...

CVE-2020-7186

CVE-2020-7186 affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue is a powershellConfigContent expression language injection that enables remote code execution. Documents indicate an attacker can exploit the beanName handling in powersh...

CVE-2020-7185

A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7185

CVE-2020-7185 describes a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue arises from how the tvxlanLegend.xhtml endpoint handles the beanName parameter, with the string not properly validated, ena...

CVE-2020-7184

A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7184

The CVE-2020-7184 issue affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). A vulnerability in viewBatchTaskResultDetailFact.xhtml allows expression-language injection in the beanName parameter, leading to remote code execution. The exploit impact is described as RCE wit...

CVE-2020-7183

CVE-2020-7183 affects Hewlett Packard Enterprise Intelligent Management Center (HPE iMC) before version 7.3 (E0705P07). The vulnerability is a forwardredirect expression language injection in the forwardredirect.xhtml endpoint where the actionbean parameter is not properly validated, allowing rem...

CVE-2020-7182

CVE-2020-7182 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The vulnerability is a sshConfig expression language injection in the sshConfig.xhtml handling of the beanName parameter, allowing remote code execution. ZDI notes that authentication ...