CVE-2020-7145

CVE-2020-7145 affects HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 (E0705P07). The vulnerability is a choosePerfView expression language injection in the beanName parameter handled by choosePerfView.xhtml, enabling remote code execution. Exploitation details in the ZDI advisory i...

CVE-2020-7144

A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7144

CVE-2020-7144 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). A compareFilesResult expression language injection exists in the handling of the compareFilesResult.xhtml endpoint, specifically via the beanName parameter, enabling remote code execut...

CVE-2020-7143

This CVE affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The flaw is a faultDevParasSet expression language injection in iMC that allows remote code execution. The root cause is improper handling/validation of the beanName parameter passed to the faultDevParasSet.xht...

CVE-2020-7142

The CVE-2020-7142 issue affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). A vulnerability in the eventInfo_content.xhtml endpoint allows expression-language injection in the eventinfo_content parameter, enabling remote code execution. Affected comp...

CVE-2020-7141

Vulnerability: HPE Intelligent Management Center (iMC) prior to 7.3 (E0705P07) is affected by a remote code execution through adddevicetoview Expression Language Injection. Root cause (per ZDI): improper handling/validation of the beanName parameter in addDeviceToView.xhtml, enabling arbitrary co...

CVE-2020-7141

A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24652

A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24652

The CVE-2020-24652 entry concerns a remote code execution via addVsiInterfaceInfo Expression Language Injection in Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The vulnerability affects iMC components handling addVsiInterfaceInfo.xhtml and is driven...

CVE-2020-24651

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24651. The issue is a syslogTempletSelectWin expression language injection in the SyslogTempletSelectWin.xhtml endpoint, enabling remote code execution with SYSTEM privileges. Exploitation details indicate ...

CVE-2020-24650

The CVE-2020-24650 issue affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). It is a legend expression language injection vulnerability in the legend.xhtml handling of the beanName parameter, enabling remote code execution. Exploitation is described as network-based with...

CVE-2020-24650

A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24649

A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24649

CVE-2020-24649 describes a remote code execution vulnerability in HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07) . The issue stems from input validation of a component referenced as “bytemessageresource transformentity,” enabling a network-accessible, unauthenticated attacke...

CVE-2020-24648

A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24648

CVE-2020-24648 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before version 7.3 (E0705P07). The issue arises from deserialization of the AccessMgrServlet className with untrusted data, enabling remote code execution. Multiple connected documents corroborate the root cause...

CVE-2020-24647

A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24646

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24646. The vulnerability is a stack-based buffer overflow in the tftpserver component that allows remote code execution. The root cause is improper validation of the length of user-supplied data prior to co...

CVE-2020-24630

A remote operatoronlinelistcontent privilege escalation vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-24630

The CVE-2020-24630 issue affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The ZDI advisory describes a privilege-escalation flaw in the operatorOnlineList_content.xhtml/operatorOnlineList_contentOnly.xhtml endpoints, where sensitive admin-level ...