CVE-2017-5790

CVE-2017-5790 is a remote deserialization vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06 . The flaw exists in the accessMgrServlet and allows unauthenticated remote code execution by deserializing untrusted data. Multiple sources (ZDI-17-166, CNVD-2017-02625, NVD entry...

CVE-2017-12561

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT version Plat 7.3 E0504P4 and earlier was found...

CVE-2017-12525

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12505

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12520

CVE-2017-12520 is a remote code execution vulnerability in HPE Intelligent Management Center PLAT 7.3 (E0504). Fixed in PLAT 7.3 (E0506) or later. CVSSv3: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation context from ZDI-17-684: perfAddorModDeviceMonitor Expression Language Injection leading to ...

CVE-2017-12556

CVE-2017-12556 is an RCE vulnerability in HP/HPE Intelligent Management Center (iMC) PLAT, affecting versions up to IMC Plat 7.3 E0504P2 and earlier. The root cause is a deserialization flaw in the MibBrowserTopoFilterServlet that listens on TCP ports 8080/8443 and does not validate untrusted dat...

CVE-2017-12527

CVE-2017-12527 relates to a Remote Code Execution in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT. Affected product: iMC PLAT version PLAT 7.3 (E0504). Root cause details in the connected sources are not fully enumerated in the provided material, but the vulnerability was a...

CVE-2017-12511

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8983

CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...

CVE-2017-8982

HPE iMC PLAT 7.3 (E0504P4) contains a Remote Authentication Restriction Bypass vulnerability (CVE-2017-8982). The issue is tied to UrlAccessController in the iMC PLAT, with unauthenticated access potentially enabling privilege escalation. Multiple public advisories document an unauthenticated EL ...

CVE-2017-12516

CVE-2017-12516 is a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504), allowing code execution via specific iMC components. The issue is documented as being fixed in PLAT v7.3 (E0506) or later. Connected advisories (ZDI-17-671) describe an authenticat...

CVE-2017-12531

CVE-2017-12531 describes a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is tied to an Expression Language Injection in the faultDevParasSet endpoint, enabling an attacker to execute arbitrary code o...

CVE-2017-12499

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12554

The CVE-2017-12554 entry concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) Platform (iMC Plat) versions up to 7.3 E0504P2 and earlier. The root cause is a path validation flaw in the mibFileServlet, which handles HTTP(S) ports 8080 and 8443. This lack of proper validation al...

CVE-2016-8525

CVE-2016-8525 is a Remote Disclosure of Information vulnerability in Hewlett Packard Enterprise (HPE) iMC PLAT. Affected: iMC PLAT versions v7.2 E0403P06 and earlier. Impact: confidentiality partial (per CVSS v2) and high (per CVSS v3); no integrity or availability impact stated. Root cause detai...

CVE-2017-12519

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12499

HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains CVE-2017-12499, a Remote Code Execution vulnerability. The issue is resolved in PLAT v7.3 (E0506) or any later version. Related documents corroborate iMC-related RCE vulnerabilities in the same family, though details vary per sourc...

CVE-2017-5805

CVE-2017-5805 concerns HPE Intelligent Management Center (iMC) PLAT 7.2. The vulnerability is a remote code execution flaw in the iMC Server service: a stack-based buffer overflow when processing the UserName field over UDP port 6666, allowing unauthenticated remote attackers to run arbitrary cod...

CVE-2017-12509

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...