Vulnerabilities > Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

DATE CVE VULNERABILITY TITLE RISK
2020-10-19 CVE-2020-7162 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7161 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7160 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7159 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7158 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7157 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7156 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A faultinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7155 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7154 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8
2020-10-19 CVE-2020-7153 Expression Language Injection vulnerability in HP Intelligent Management Center 7.2/7.3
A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
network
low complexity
hp CWE-917
critical
9.8