CVE-2019-11974

The CVE-2019-11974 issue affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform (PLAT) and is caused by a SQL injection in the function handling queryIpAllocateInfoBySubnetIp, enabling code execution. Affected versions are IMC PLAT earlier than 7.3 E0506P09. Multiple conn...

CVE-2019-11972

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11971

CVE-2019-11971 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, prior to 7.3 E0506P09. Root cause is an SQL injection in the isAccountBindingWithOperator path that can lead to remote code execution. The flaw enables an attacker to execute arbitrary code with SYSTEM pri...

CVE-2019-11969

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11969

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a ForwardRedirect expression language injection that enables remote code execution via the ForwardRedirect.xhtml endpoint (actionbean parameter). The vulnerability, confirmed across multiple sources, c...

CVE-2019-11968

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11968

CVE-2019-11968 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT. It affects IMC 7.3 E0506P09 and earlier; exploitation can allow an attacker to execute arbitrary code on affected installations. Multiple connected sources corroborate t...

CVE-2019-11967

CVE-2019-11967 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT builds prior to 7.3 E0506P09. Connected sources describe a remote code execution vulnerability in the ConfFileResource renameFile handling, enabling an attacker to execute arbitrary code with System context...

CVE-2019-11985

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11986

Summary: CVE-2019-11986 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. A flaw in the GWT perfSelItemServer expression language allows an attacker to trigger remote code execution. The root cause is an injection in the expression evaluati...

CVE-2019-11986

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11966

HPE Intelligent Management Center (IMC) PLAT earlier than 7.3 E0506P09 contains a remote privilege escalation vulnerability. The root cause is that operatorOnlineList_contentOnly stores sensitive information in clear text, enabling an attacker to escalate privileges on vulnerable IMC installation...

CVE-2019-11965

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11965

CVE-2019-11965 affects Hewlett Packard Enterprise’s IMC PLAT prior to 7.3 E0506P09. The vulnerability is a deviceThresholdConfig expression language injection that can lead to remote code execution . The issue arises in handling of the beanName parameter in deviceThresholdConfig.xhtml, enabling a...

CVE-2019-11964

The CVE-2019-11964 issue affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT pre-7.3 E0506P09, where the iccSelectDeviceSeries expression language handling permits remote code execution. Red Hat and CNVD entries confirm RCE in IMC, tied to iccSelectDeviceSeries and its bea...

CVE-2019-11963

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11963

CVE-2019-11963 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform, prior to version 7.3 E0506P09. The root cause is a deploySelectBootrom Expression Language Injection vulnerability in IMC, leading to remote code execution. Multiple sources confirm that an attacker co...

CVE-2019-11962

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11962

HPE Intelligent Management Center (IMC) PLAT contains a remote code execution vulnerability in the selectUserGroup expression language handling. Affected: IMC PLAT versions earlier than 7.3 E0506P09. Root cause: expression-language injection in selectUserGroup.xhtml. Impact: remote code execution...

CVE-2019-11960

HPE Intelligent Management Center (IMC) PLAT, affected in versions earlier than 7.3 E0506P09, is vulnerable to a remote code execution through select expression language injection. The root cause involves improper handling of the beanName parameter in the select.xhtml endpoint, enabling an attack...