CVE-2019-11972

CVE-2019-11972 is a SQL injection code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affected in versions earlier than 7.3 E0506P09. Root cause cited in connected sources is improper handling in OperatorMgrImpl isAccountCanceled SQL construction, ...

CVE-2019-11972

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11971

CVE-2019-11971 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, prior to 7.3 E0506P09. Root cause is an SQL injection in the isAccountBindingWithOperator path that can lead to remote code execution. The flaw enables an attacker to execute arbitrary code with SYSTEM pri...

CVE-2019-11971

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11970

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11970

This entry documents a SQL injection code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. The flaw exists in the ImcplatResServiceSkeleton’s handling of SQL queries (queryDataBySQL), where insufficient input validation ...

CVE-2019-11969

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11969

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a ForwardRedirect expression language injection that enables remote code execution via the ForwardRedirect.xhtml endpoint (actionbean parameter). The vulnerability, confirmed across multiple sources, c...

CVE-2019-11968

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11968

CVE-2019-11968 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT. It affects IMC 7.3 E0506P09 and earlier; exploitation can allow an attacker to execute arbitrary code on affected installations. Multiple connected sources corroborate t...

CVE-2019-11967

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11967

CVE-2019-11967 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT builds prior to 7.3 E0506P09. Connected sources describe a remote code execution vulnerability in the ConfFileResource renameFile handling, enabling an attacker to execute arbitrary code with System context...

CVE-2019-11985

CVE-2019-11985 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. A remote attacker can trigger code execution via the beanName parameter handled by choosePerfView.xhtml due to improper validation. Documents indicate network-exposed remote code execution with possible aut...

CVE-2019-11985

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11986

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11986

Summary: CVE-2019-11986 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. A flaw in the GWT perfSelItemServer expression language allows an attacker to trigger remote code execution. The root cause is an injection in the expression evaluati...

CVE-2019-11966

HPE Intelligent Management Center (IMC) PLAT earlier than 7.3 E0506P09 contains a remote privilege escalation vulnerability. The root cause is that operatorOnlineList_contentOnly stores sensitive information in clear text, enabling an attacker to escalate privileges on vulnerable IMC installation...

CVE-2019-11966

A remote privilege escalation vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11965

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11965

CVE-2019-11965 affects Hewlett Packard Enterprise’s IMC PLAT prior to 7.3 E0506P09. The vulnerability is a deviceThresholdConfig expression language injection that can lead to remote code execution . The issue arises in handling of the beanName parameter in deviceThresholdConfig.xhtml, enabling a...