CVE-2019-11948

CVE-2019-11948 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. Multiple sources describe a remote code execution vulnerability arising from improper validation of user-supplied input (notably the beanName parameter in IMC pages and related endpoints). Exploitation lead...

CVE-2019-11948

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11947

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11947

The CVE-2019-11947 entry corresponds to a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. Publicly documented details across multiple sources converge on a root cause: hard-coded credentials ...

CVE-2019-11946

The CVE-2019-11946 entry affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09, where a remote credential disclosure vulnerability exists. Multiple connected documents describe a flaw in the IMC’s authentication-related logic, notably a hard-cod...

CVE-2019-11946

A remote credential disclosure vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11945

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11945

HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09 contains a remote code execution vulnerability in AccessMgrServlet due to untrusted data deserialization. Exploitation is reported as unauthenticated remote code execution. Affected version range is IMC PLAT earlier than 7.3 E0506...

CVE-2019-11944

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11944

Summary: CVE-2019-11944 affects HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. The issue is an insecure/deserialization flaw in the IMC AMF3 Externalizable path that allows remote attackers to trigger remote code execution. Several connected advisories confirm RCE...

CVE-2019-11943

CVE-2019-11943 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, present in versions earlier than 7.3 E0506P09. The flaw arises from improper handling of the beanName parameter in the SoapConfigBean/soapConfigContent endpoint, allowin...

CVE-2019-11943

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11942

CVE-2019-11942 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affecting releases earlier than 7.3 E0506P09. The root cause is an expression language injection in the TopoMsgServlet endpoint, which can be exploited to run arbitrary ...

CVE-2019-11941

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11941

CVE-2019-11941 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. Connected advisories consistently describe a remote code execution vulnerability caused by iccSelectDevType expression language injection, allowing an attacker to run arbitrar...

CVE-2019-5391

CVE-2019-5391 is a stack-based buffer overflow vulnerability in HPE Intelligent Management Center (IMC) Platform, present in IMC PLAT versions earlier than 7.3 E0506P09. Multiple connected sources (including Red Hat, CNVD, CVE records) describe it consistently as a stack overflow issue affecting ...

CVE-2019-5390

A remote command injection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5390

CVE-2019-5390 is a remote command injection vulnerability in HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. The issue affects the iMC/dbman components and allows an unauthenticated, network‑based attacker to execute arbitrary commands on the remote host. Impact is des...

CVE-2019-5389

CVE-2019-5389 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The root cause is an expression-language injection in IMC that can lead to remote code execution. ZDI notes that authentication is required to exploit, but the authentication mechanism...

CVE-2019-5388

HPE Intelligent Management Center (IMC) PLAT is affected by CVE-2019-5388 in versions earlier than 7.3 E0506P09. The published reports describe a remote code execution vulnerability stemming from an expression language injection in IMC’s handling of the evaluation context (notably the passBeanNam...