CVE-2017-5822

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	Intelligent Management Center (iMC) PLAT	PLAT 7.3 E0504P04

References

http://www.securitytracker.com/id/1038560Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_usVendor Advisory
http://www.securitytracker.com/id/1038560Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_usVendor Advisory

Timeline

Published: Feb 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-58239.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.CVE-2017-58249.8An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.CVE-2017-58258.8A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.CVE-2017-58268.8An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.CVE-2017-58275.4A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.CVE-2017-58288.1An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.CVE-2017-58297.8An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.CVE-2017-58309.8Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery sc CVE-2017-58315.9Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote CVE-2017-58325.4Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or CVE-2017-58336.1Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows rem CVE-2017-58345.5The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a