CVE-2019-5377

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5376

CVE-2019-5376 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) Platform, with a Java reflection/serialization-based remote code execution in the TopoMsgServlet endpoint. Affected versions include IMC 7.3 E0506P09 and earlier; the vulnerability allows an attacker to execute c...

CVE-2019-5375

The CVE-2019-5375 entry concerns a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, older than version 7.3 E0506P09. The issue stems from an ictExpertDownload expression language injection in IMC’s web interface (beanName parameter handli...

CVE-2019-5373

CVE-2019-5373 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09 . The root cause is improper handling/validation of the beanName parameter in the IMC web components (notably related to CustomTemplateSelectBean/bean handling in customTemp...

CVE-2019-5373

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5371

HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09 is affected by a remote code execution vulnerability due to an expression-language injection in the addDeviceToView/beanName handling. The flaw allows an attacker to execute arbitrary code on vulnerable installations, potentially wi...

CVE-2019-5371

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5369

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5369

CVE-2019-5369 affects HPE Intelligent Management Center (IMC) Platform prior to 7.3 E0506P09. Multiple sources describe a tvxlanLegend expression language injection that allows remote code execution. The vulnerability enables arbitrary code execution in the context of SYSTEM; some advisories note...

CVE-2019-5368

HPE Intelligent Management Center (IMC) PLAT

CVE-2019-5367

HPE Intelligent Management Center (IMC) PLAT is affected for versions earlier than 7.3 E0506P09, with remote code execution. Public sources (ZDI) describe exploitation via an insecure configuration with default credentials in the web service (MyFaces ViewState issue), enabling arbitrary code exec...

CVE-2019-5367

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5365

CVE-2019-5365 affects HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. The root cause is a deviceSelect expression language injection that allows remote code execution. Impact is remote code execution with HIGH severity; authenticated access is required but can be bypassed per ...

CVE-2019-5365

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5363

The CVE-2019-5363 entry affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09. Multiple connected sources describe a remote code execution vulnerability in IMC, caused by an Expression Language injection in the GWT deviceservice (saveSelectedDevices) pa...

CVE-2019-5363

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5362

HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09 is affected by CVE-2019-5362. The connected sources describe a TopoDebugServlet expression language injection in IMC that allows remote code execution. The vulnerability exists in the way serialized objects are handled by ...

CVE-2019-5361

CVE-2019-5361 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affecting versions earlier than 7.3 E0506P09. The issue stems from a faultParasSet expression language injection in IMC (7.3 E0506P09 and earlier), allowing an attacker t...

CVE-2019-5360

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a remote code execution via perfAddorModDeviceMonitor Expression Language Injection. The flaw is in handling of the beanName parameter, enabling arbitrary code execution in the context of SYSTEM; accor...

CVE-2019-5359

CVE-2019-5359 is a remote code execution vulnerability in HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09. The issue arises from a select expression language injection in IMC’s select.xhtml endpoint, where the beanName parameter is not properly validated. Exploitat...