1419 matches found
CVE-2019-5352
CVE-2019-5352 is an RCE vulnerability in HPE Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The Red Hat/CNVD/CVE listings and ZDI report describe a GWT-based expression language injection in the perfAddFormServer servlet (beanName parameter) that allows re...
CVE-2019-5351
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5351
The CVE-2019-5351 entry concerns Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affected in versions earlier than 7.3 E0506P09. The underlying issue is a remote code execution vulnerability caused by an expression-language injection in the GWT deviceservice, specifically the...
CVE-2019-5350
CVE-2019-5350 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The Red Hat, CNVD, CNVD-like entries corroborate a remote code execution via deserialization in TopoDebugServlet, treated as an untrusted data deserialization vulnerability that could allow an attacker to ex...
CVE-2019-5349
CVE-2019-5349 is a remote code execution in HPE Intelligent Management Center (IMC) PLAT, affecting IMC up to and including 7.3 E0506P09. Connected sources describe a TopoDebugServlet expression language injection that can lead to remote code execution, with exploitation details indicating that a...
CVE-2019-5349
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5348
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5348
HPE Intelligent Management Center (IMC) PLAT features a remote code execution in GWT deviceservice due to expression language injection via queryCustomCondition (beanName) in vulnerable builds before 7.3 E0506P09. Exploitation requires authentication but can bypass; code executes with SYSTEM priv...
CVE-2019-5347
A remote authentication bypass vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5347
HPE Intelligent Management Center (IMC) PLAT contains a remote authentication bypass in the UrlAccessController servlet, affecting versions earlier than 7.3 E0506P09. The vulnerability allows remote attackers to bypass authentication and perform unauthorized operations. The available sources cons...
CVE-2019-5346
CVE-2019-5346 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The vulnerability is a faultInfo_content expression language injection that allows remote code execution on vulnerable IMC installations. The ZDI advisory describes exploitation requir...
CVE-2019-5346
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5345
CVE-2019-5345 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09, with a remote code execution vulnerability due to an expression language injection in eventInfo_content. Root cause involves improper handling of the beanName parameter in the eventInfo_content.xhtml endpoin...
CVE-2019-5344
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5344
HPE Intelligent Management Center (IMC) PLAT before version 7.3 E0506P09 contains a remote code execution vulnerability. Connected sources identify a faultDevParasSet expression language injection vulnerability in IMC that allows remote attackers to execute arbitrary code. The vulnerability affec...
CVE-2019-5343
HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09 contains a remote code execution vulnerability in the compareFilesResult expression language handling. The flaw arises from how the beanName parameter is processed in compareFilesResult.xhtml, enabling an attacker to execute arbit...
CVE-2019-5343
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5342
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-5342
CVE-2019-5342 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The root cause is a legend expression language injection in the legend.xhtml beanName handling, enabling remote code execution. Multiple sources corroborate a remote code execution risk with high severity (C...