1406 matches found
CVE-2019-5358
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5358
CVE-2019-5358 affects HPE Intelligent Management Center (IMC) PLAT up to and including 7.3 E0506P09. The issue is a viewTaskResultDetailFactExpression Language injection in the IMC UI (beanName parameter in viewTaskResultDetailFact.xhtml) that can lead to remote code execution. Details across sou...
CVE-2019-5357
HPE Intelligent Management Center (IMC) PLAT vulnerable versions prior to 7.3 E0506P09 contain a FileUploadServlet flaw that enables remote code execution. Multiple sources describe an unrestricted file upload path in IMC, allowing an attacker to upload arbitrary files and execute code in the con...
CVE-2019-5356
HPE IMC PLAT (HPE Intelligent Management Center) has a remote code execution vulnerability tracked as CVE-2019-5356 in versions earlier than 7.3 E0506P09. Exploitation details in connected sources point to a path traversal/remote code execution arising from insecure handling in the CommonUtils un...
CVE-2019-5355
A remote denial of service vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5355
CVE-2019-5355 (HPE iMC) is a remote DoS in the iMC dbman component caused by improper validation of user-supplied data. An unauthenticated attacker could send crafted commands (notably 10003, and 10014 can trigger denial or restart of the dbman process) to disrupt service. Affected product/versio...
CVE-2019-5354
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5354
CVE-2019-5354 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform, with remote code execution in IMC versions earlier than 7.3 E0506P09. Related sources describe an expression language injection flaw in IMC’s GWT perfInsListServer and associated servlet logic (getInsLi...
CVE-2019-5353
CVE-2019-5353 affects HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 due to a reportpage index expression language injection in IMC. The flaw can lead to remote code execution with network access and no user interaction, as described by multiple sources (ZDI). Real-wor...
CVE-2019-5352
CVE-2019-5352 is an RCE vulnerability in HPE Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The Red Hat/CNVD/CVE listings and ZDI report describe a GWT-based expression language injection in the perfAddFormServer servlet (beanName parameter) that allows re...
CVE-2019-5351
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5351
The CVE-2019-5351 entry concerns Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affected in versions earlier than 7.3 E0506P09. The underlying issue is a remote code execution vulnerability caused by an expression-language injection in the GWT deviceservice, specifically the...
CVE-2019-5350
CVE-2019-5350 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The Red Hat, CNVD, CNVD-like entries corroborate a remote code execution via deserialization in TopoDebugServlet, treated as an untrusted data deserialization vulnerability that could allow an attacker to ex...
CVE-2019-5349
CVE-2019-5349 is a remote code execution in HPE Intelligent Management Center (IMC) PLAT, affecting IMC up to and including 7.3 E0506P09. Connected sources describe a TopoDebugServlet expression language injection that can lead to remote code execution, with exploitation details indicating that a...
CVE-2019-5349
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5348
HPE Intelligent Management Center (IMC) PLAT features a remote code execution in GWT deviceservice due to expression language injection via queryCustomCondition (beanName) in vulnerable builds before 7.3 E0506P09. Exploitation requires authentication but can bypass; code executes with SYSTEM priv...
CVE-2019-5348
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5347
HPE Intelligent Management Center (IMC) PLAT contains a remote authentication bypass in the UrlAccessController servlet, affecting versions earlier than 7.3 E0506P09. The vulnerability allows remote attackers to bypass authentication and perform unauthorized operations. The available sources cons...