CVE-2020-7151

HPE Intelligent Management Center (iMC) before PLAT 7.3 E0705P07 is affected by a faulttrapgroupselect expression language injection that leads to remote code execution. The vulnerability stems from improper handling of the beanName parameter in faultTrapGroupSelect.xhtml, allowing an attacker to...

CVE-2020-7150

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-7150, a faultStatChooseFaultType expression language injection leading to remote code execution. The vulnerability resides in how the beanName parameter is handled in the faultStatChooseFaultType.xhtml endp...

CVE-2020-7149

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7149

CVE-2020-7149 describes an ictexpertcsvdownload expression language injection in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The Red Hat, CNVD, CNVD, NVD and ZDI entries in the connected set confirm a remote code execution vulnerability that can ...

CVE-2020-7148

A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7147

CVE-2020-7147 describes a remote code execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) before platform release 7.3 (E0705P07). The root cause is an expression-language injection in the deploySelectBootrom handling (beanName parameter) that allows an attacker to execut...

CVE-2020-7147

A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7146

A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7146

The CVE-2020-7146 entry affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3, release E0705P07. The vulnerability is a devGroupSelect expression language injection that leads to remote code execution. Public details across connected sources specify that the iss...

CVE-2020-7145

CVE-2020-7145 affects HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 (E0705P07). The vulnerability is a choosePerfView expression language injection in the beanName parameter handled by choosePerfView.xhtml, enabling remote code execution. Exploitation details in the ZDI advisory i...

CVE-2020-7145

A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7144

CVE-2020-7144 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). A compareFilesResult expression language injection exists in the handling of the compareFilesResult.xhtml endpoint, specifically via the beanName parameter, enabling remote code execut...

CVE-2020-7144

A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7143

This CVE affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The flaw is a faultDevParasSet expression language injection in iMC that allows remote code execution. The root cause is improper handling/validation of the beanName parameter passed to the faultDevParasSet.xht...

CVE-2020-7142

The CVE-2020-7142 issue affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). A vulnerability in the eventInfo_content.xhtml endpoint allows expression-language injection in the eventinfo_content parameter, enabling remote code execution. Affected comp...

CVE-2020-7141

Vulnerability: HPE Intelligent Management Center (iMC) prior to 7.3 (E0705P07) is affected by a remote code execution through adddevicetoview Expression Language Injection. Root cause (per ZDI): improper handling/validation of the beanName parameter in addDeviceToView.xhtml, enabling arbitrary co...

CVE-2020-7141

A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24652

The CVE-2020-24652 entry concerns a remote code execution via addVsiInterfaceInfo Expression Language Injection in Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The vulnerability affects iMC components handling addVsiInterfaceInfo.xhtml and is driven...

CVE-2020-24652

A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24651

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24651. The issue is a syslogTempletSelectWin expression language injection in the SyslogTempletSelectWin.xhtml endpoint, enabling remote code execution with SYSTEM privileges. Exploitation details indicate ...