1406 matches found
Remote code execution
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
Denial of service
A remote denial of service vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11984
The CVE-2019-11984 case concerns HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09, where a SQL injection in the updateEmailSuffix path allows arbitrary code execution. The root cause is improper validation of a user-supplied string used to construct SQL queries, enabling an attack...
CVE-2019-11984
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11980
A remote code exection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11980
HPE Intelligent Management Center (IMC) Platform vulnerable in releases older than 7.3 E0506P09. The issue resides in SSHParameterResource addSSHParameterKeyFile handling, enabling remote code execution. Exploitation requires authentication, but the existing mechanism can be bypassed according to...
CVE-2019-11979
CVE-2019-11979 affects HPE Intelligent Management Center (IMC) PLAT older than 7.3 E0506P09. A SQL injection in the handling of the queryIpAllocateInfoByServerIp function allows remote code execution, requiring authentication (though bypass may be possible per advisory). Impact is arbitrary code ...
CVE-2019-11979
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11978
CVE-2019-11978 is a SQL injection code execution vulnerability in Hewlett Packard Enterprise IMC PLAT prior to 7.3 E0506P09. The issue affects the SmscCfgDaoImpl SQL handling (updateSmsSendingWay) and can lead to remote code execution. Exploitation information across sources varies: some describe...
CVE-2019-11978
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11977
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11977
CVE-2019-11977 affects Hewlett Packard Enterprise’s Intelligent Management Center (IMC) PLAT, with vulnerability in the readListBySql path that constructs SQL queries without proper validation. This SQL injection can lead to remote code execution on IMC installations, affecting versions earlier t...
CVE-2019-11976
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11976
HPE Intelligent Management Center (IMC) PLAT
CVE-2019-11975
HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09 is affected by CVE-2019-11975 due to a SQL injection in the queryOptionInfosByIp handler, allowing remote code execution. Root cause: improper validation of user-supplied input used to construct SQL queries. Impact: potential arbitr...
CVE-2019-11975
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11974
The CVE-2019-11974 issue affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform (PLAT) and is caused by a SQL injection in the function handling queryIpAllocateInfoBySubnetIp, enabling code execution. Affected versions are IMC PLAT earlier than 7.3 E0506P09. Multiple conn...
CVE-2019-11974
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-11973
Summary: CVE-2019-11973 is a SQL injection code execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The issue arises from improper handling/validation in the queryDataBySQL path, allowing an attacker to cr...