CVE-2017-12534

CVE-2017-12534 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The root cause, per SRC-2017-0017, is an Expression Language injection in ictExpertCSVDownload.xhtml (beanName handling) that allows code execution with SYSTEM context. It is fixed...

CVE-2017-12524

CVE-2017-12524 is a remote code execution vulnerability in Hewlett Packard Enterprise’s iMC PLAT, affecting PLAT 7.3 (E0504). The issue enables code execution from a network-accessible context with low attack complexity and low privileges, leading to high impact on confidentiality, integrity, and...

CVE-2017-12540

CVE-2017-12540 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, affecting PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later release. Public references in the connected documents confirm it as ...

CVE-2017-12508

CVE-2017-12508 affects HPE iMC PLAT 7.3 (E0504); a Remote Code Execution vulnerability was fixed in PLAT 7.3 (E0506) or later. Connected sources also describe an Expression Language/beanName handling flaw in operatorGroupTreeSelectContent.xhtml allowing RCE (ZDI-17-672), requiring authentication ...

CVE-2017-5815

CVE-2017-5815 corresponds to a remote code execution in HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P04. The vulnerability is described in multiple sources as an unspecified flaw allowing remote code execution, with the NVD entry noting critical impact. A patch was released by HPE to ad...

CVE-2017-12556

A Remote Code Execution vulnerability in HPE intelligent Management Center iMC PLAT version IMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-12513

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12512

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8963

CVE-2017-8963 concerns a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The ZDI advisory details a Remote Code Execution path via TopoReqServlet, caused by improper validation leading to deserialization of untrus...

CVE-2017-8966

CVE-2017-8966 is a deserialization of untrusted data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. Several connected sources tie this to the TopoMsgServlet component, where improper validation of deserialized input can enable arbitrary code exec...

CVE-2017-5817

HPE iMC PLAT 7.3 E0504P04 contains a Remote Code Execution via the dbman RestoreDBase opcode 10007. The vulnerability arises from improper validation of user-supplied input in RestoreDBase handling, allowing unauthenticated remote attackers to inject commands and execute arbitrary OS commands wit...

CVE-2017-8961

The CVE-2017-8961 issue affects HPE Intelligent Management Center (IMC) PLAT versions around 7.3 (E0504P02 and related builds), where a directory traversal flaw in the flexFileUpload/FileUploadServlet path handling can enable remote code execution. The root cause is lack of proper validation of u...

CVE-2017-12558

A Remote Code Execution vulnerability in HPE intelligent Management Center iMC PLAT version IMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-12493

CVE-2017-12493 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. Affected product: iMC PLAT version 7.3 (E0504). Root cause details are not fully elaborated in the provided text, but remediation is stated: the issue is re...

CVE-2017-5790

A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12514

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12492

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12515

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8955

CVE-2017-8955 concerns HPE Intelligent Management Center (iMC) PLAT 7.2 with a reported Remote Code Execution vulnerability (per NVD and CVE listings). Connected sources also describe a separate dbman service flaw on iMC that could allow remote/file deletion abuse (ZDI-17-482), indicating multipl...

CVE-2017-12500

CVE-2017-12500 is a remote, unauthenticated RCE in HPE iMC PLAT 7.3 (E0504) via EL Injection (beanName parameter and related pages). Exploitation leads to arbitrary code execution; patched in PLAT v7.3 (E0506) or later (per NVD entry and corroborating exploit references).