CVE-2020-7169

Affected product : HPE Intelligent Management Center (iMC). Vulnerability class : ictExpertCSVDownload expression language injection leading to remote code execution. Root cause : improper handling of the beanName parameter in ictExpertCSVDownload.xhtml, allowing crafted input to be evaluated as ...

CVE-2020-7168

A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7168

CVE-2020-7168 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue arises from a flaw in the selectUserGroup.xhtml endpoint, where the beanName parameter is improperly validated, allowing an attacker to in...

CVE-2020-7167

The CVE-2020-7167 issue affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) prior to version 7.3 (E0705P07). The vulnerability is a quickTemplateSelect expression language injection that leads to remote code execution. Affected component is the iMC web interface handling the ...

CVE-2020-7167

A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7166

CVE-2020-7166 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to version 7.3 (E0705P07). The issue is a remote code execution vulnerability caused by operatorGroupTreeSelectContent expression language injection, triggered via the beanName handling in operatorGroupTree...

CVE-2020-7166

A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7165

The CVE-2020-7165 entry concerns a remote code execution vulnerability in Hewlett Packard Enterprise’s HPE Intelligent Management Center (iMC) prior to version 7.3 (E0705P07). The flaw is described as an iccSelectCommand expression language injection vulnerability, affecting the iccSelectCommand....

CVE-2020-7165

A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7164

A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7164

HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07) is affected. The vulnerability is an operationSelect expression language injection in the beanName parameter of operationSelect.xhtml, enabling remote code execution. Impact is RCE with HIGH confidentiality/integrity/availabilit...

CVE-2020-7163

CVE-2020-7163 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The vulnerability is a navigationTo expression language injection in the navigationTo.xhtml endpoint, allowing remote code execution. The root cause is improper handling/validation o...

CVE-2020-7162

The CVE-2020-7162 issue affects HPE Intelligent Management Center (iMC) prior to 7.3 (E0705P07). It stems from a language-injection vulnerability in the operatorGroupSelectContent expression handling, specifically the beanName parameter in operatorGroupSelectContent.xhtml, allowing remote code ex...

CVE-2020-7161

CVE-2020-7161 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). Multiple connected sources corroborate a reportTaskSelect expression language injection in iMC that enables remote code execution. The Red Hat, CNVD, NVD and ZDI entries describe the...

CVE-2020-7160

A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7160

CVE-2020-7160 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue is a iccSelectDeviceSeries expression language injection in the iccSelectDeviceSeries.xhtml endpoint, allowing remote code execution. The vulnerability can execute code with ...

CVE-2020-7159

CVE-2020-7159 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The vulnerability arises from improper handling of the customtemplateselect expression/beanName parameter, enabling a remote code execution (RCE) condition. The NVD entry rates this as...

CVE-2020-7159

A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7158

CVE-2020-7158 affects Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue is a perfselecttask expression language injection in perfSelectTask.xhtml that allows remote code execution. Documents indicate potential RCE with network access and ...

CVE-2020-7158

A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...