CVE-2019-5382

The CVE-2019-5382 entry concerns HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09, where a faultFlashEventSelectFact expression-language injection allows remote code execution. The issue arises in the handling of the beanName parameter in faultFlashEventSelectFact.xhtml, per ZDI...

CVE-2019-5381

The CVE-2019-5381 entry concerns Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affected in versions up to 7.3 E0506P09. The root cause is a faultStatChooseFaultType expression-language injection in IMC’s web UI, specifically via the beanName parameter, enabling remote code ...

CVE-2019-5380

The CVE-2019-5380 flaw affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. It stems from a selViewNavContent expression language injection in the beanName parameter, enabling remote code execution. Impact is remote attacker access with network access (likely SYSTEM-level),...

CVE-2019-5379

HPE Intelligent Management Center (IMC) PLAT vulnerabilities up to version 7.3 E0506P09 enable remote code execution. The issue is a deploySelectSoftware expression language injection in IMC’s web interface, specifically the beanName parameter passed to deploySelectSoftware.xhtml, allowing an att...

CVE-2019-5379

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5378

Summary of CVE-2019-5378 : A remote code execution vulnerability affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. The flaw is an expression-language injection in the userSelectPagingContent feature, specifically the beanName parameter in t...

CVE-2019-5378

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5377

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5377

The CVE-2019-5377 entry concerns Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affected prior to 7.3 E0506P09. The connected documents confirm a remote code execution flaw due to an insecure handling of the sshConfig expression language, specifically abuse of the beanName p...

CVE-2019-5376

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5376

CVE-2019-5376 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform, with a Java reflection/serialization-based remote code execution in the TopoMsgServlet endpoint. Affected versions include IMC 7.3 E0506P09 and earlier; the vulnerability allows an attacker to execute c...

CVE-2019-5375

The CVE-2019-5375 entry concerns a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, older than version 7.3 E0506P09. The issue stems from an ictExpertDownload expression language injection in IMC’s web interface (beanName parameter handli...

CVE-2019-5375

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5374

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5374

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are vulnerable to CVE-2019-5374 due to improper handling of the beanName parameter in operatorGroupTreeSelectContent.xhtml, enabling remote code execution. The root cause is an expression-language injection/vector in ...

CVE-2019-5373

CVE-2019-5373 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09 . The root cause is improper handling/validation of the beanName parameter in the IMC web components (notably related to CustomTemplateSelectBean/bean handling in customTemp...

CVE-2019-5372

The CVE-2019-5372 entry concerns Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, vulnerable in versions earlier than 7.3 E0506P09. The flaw is an iccSelectRules expression language injection in IMC, enabling remote code execution. Exploitation context: remote attackers may ex...

CVE-2019-5372

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5371

HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09 is affected by a remote code execution vulnerability due to an expression-language injection in the addDeviceToView/beanName handling. The flaw allows an attacker to execute arbitrary code on vulnerable installations, potentially wi...

CVE-2019-5370

CVE-2019-5370 corresponds to a remote code execution vulnerability in HP Enterprise’s Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. Connected advisories identify the root cause as insecure handling of the beanName parameter in the ictExpertCSVDownload.xhtml endpoint, ena...