1406 matches found
CVE-2019-5370
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5369
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5369
CVE-2019-5369 affects HPE Intelligent Management Center (IMC) Platform prior to 7.3 E0506P09. Multiple sources describe a tvxlanLegend expression language injection that allows remote code execution. The vulnerability enables arbitrary code execution in the context of SYSTEM; some advisories note...
CVE-2019-5368
HPE Intelligent Management Center (IMC) PLAT
CVE-2019-5367
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5367
HPE Intelligent Management Center (IMC) PLAT is affected for versions earlier than 7.3 E0506P09, with remote code execution. Public sources (ZDI) describe exploitation via an insecure configuration with default credentials in the web service (MyFaces ViewState issue), enabling arbitrary code exec...
CVE-2019-5366
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5366
CVE-2019-5366 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The issue is a remote code execution vulnerability arising from a guiDataDetail expression language injection vulnerability, where the beanName parameter handling leads to code execution with SYSTEM privileg...
CVE-2019-5365
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5365
CVE-2019-5365 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The root cause is a deviceSelect expression language injection that allows remote code execution. Impact is remote code execution with HIGH severity; authenticated access is required but can be bypassed per ...
CVE-2019-5364
CVE-2019-5364 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The root cause is a quickTemplateSelect expression language injection in IMC, leading to remote code execution. ZDI notes authentication is required but can be bypassed; exploit targets the beanName paramete...
CVE-2019-5363
The CVE-2019-5363 entry affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. Multiple connected sources describe a remote code execution vulnerability in IMC, caused by an Expression Language injection in the GWT deviceservice (saveSelectedDevices) pa...
CVE-2019-5363
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5362
HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 is affected by CVE-2019-5362. The connected sources describe a TopoDebugServlet expression language injection in IMC that allows remote code execution. The vulnerability exists in the way serialized objects are handled by ...
CVE-2019-5362
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5361
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5361
CVE-2019-5361 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The issue stems from a faultParasSet expression language injection in IMC (7.3 E0506P09 and earlier), allowing an attacker t...
CVE-2019-5360
HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a remote code execution via perfAddorModDeviceMonitor Expression Language Injection. The flaw is in handling of the beanName parameter, enabling arbitrary code execution in the context of SYSTEM; accor...
CVE-2019-5359
CVE-2019-5359 is a remote code execution vulnerability in HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09. The issue arises from a select expression language injection in IMC’s select.xhtml endpoint, where the beanName parameter is not properly validated. Exploitat...