CVE-2017-8962

CVE-2017-8962 corresponds to a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory identifies exploitation as a remote code execution flaw in the perfAccessMgrServlet, where insufficient inp...

CVE-2017-12517

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

CVE-2017-5818

CVE-2017-5818 affects HPE iMC PLAT (H3C-branded) v7.3 E0504P04. The flaw is in the dbman service handling opcode 10007, allowing an unauthenticated remote attacker to delete arbitrary files with SYSTEM privileges (arbitrary file deletion). Affected product is described in the connected documents;...

CVE-2016-8525

CVE-2016-8525 is a Remote Disclosure of Information vulnerability in Hewlett Packard Enterprise (HPE) iMC PLAT. Affected: iMC PLAT versions v7.2 E0403P06 and earlier. Impact: confidentiality partial (per CVSS v2) and high (per CVSS v3); no integrity or availability impact stated. Root cause detai...

CVE-2017-12489

CVE-2017-12489 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, affecting PLAT 7.3 (E0504). The issue is exploitable remotely over the network with low attack complexity and no user interaction, potentially compromising confidentiali...

CVE-2017-12504

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12540

CVE-2017-12540 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, affecting PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later release. Public references in the connected documents confirm it as ...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-5820

The CVE-2017-5820 issue affects HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 (dbman component). It is a command-injection / remote code execution vulnerability caused by improper validation of user-supplied input when handling BackupZipFile/ opcode commands in dbman, allowing...

CVE-2017-8964

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-12493

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12534

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12540

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5823

CVE-2017-5823 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise iMC PLAT 7.3 E0504P04. The flaw resides in the dbman service (opcode 10013), where a lack of proper validation of a user-supplied string before invoking a system call allows an unauthenticated attacker to execute...

CVE-2017-8958

Summary: CVE-2017-8958 corresponds to a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. Affected software: iMC PLAT version 7.3 E0504P04 and earlier (as stated across multiple sources). Impact as described: The vulnerability allows...

CVE-2017-8963

A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12505

CVE-2017-12505 is an RCE in HPE iMC PLAT 7.3 (E0504) that allows remote code execution via vulnerable handling in iMC’s components; HP fixed it in PLAT v7.3 (E0506) or later. Connected sources (e.g., ZDI-17-668) describe an iccSelectCommand expression language issue that requires authentication (...