Vulnerabilities (CVE)

Filtered by CWE-917
Total 213 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7155 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7154 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7153 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7152 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7151 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7150 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7149 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7148 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7147 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7146 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7145 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7144 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7143 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7142 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-7141 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-3956 2 Linux, Vmware 3 Linux Kernel, Photon Os, Vcloud Director 2026-06-17 6.5 MEDIUM 8.8 HIGH
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to arbitrary remote code execution. This vulnerability can be exploited through the HTML5- and Flex-based UIs, the API Explorer interface and API access.
CVE-2020-26565 1 Objectplanet 1 Opinio 2026-06-17 5.0 MEDIUM 7.5 HIGH
ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. This can be used to retrieve possibly sensitive serverInfo data.
CVE-2020-24652 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-24651 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
CVE-2020-24650 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).