A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intelligent_management_center | Hp | * | 7.3 (excluding) |
| Intelligent_management_center | Hp | 7.3 (including) | 7.3 (including) |
| Intelligent_management_center | Hp | 7.3-e0501 (including) | 7.3-e0501 (including) |
| Intelligent_management_center | Hp | 7.3-e0503 (including) | 7.3-e0503 (including) |
| Intelligent_management_center | Hp | 7.3-e0503p02 (including) | 7.3-e0503p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0504 (including) | 7.3-e0504 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p02 (including) | 7.3-e0504p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p04 (including) | 7.3-e0504p04 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p2 (including) | 7.3-e0504p2 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p4 (including) | 7.3-e0504p4 (including) |
| Intelligent_management_center | Hp | 7.3-e0506 (including) | 7.3-e0506 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p02 (including) | 7.3-e0506p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p03 (including) | 7.3-e0506p03 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p07 (including) | 7.3-e0506p07 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p09 (including) | 7.3-e0506p09 (including) |
| Intelligent_management_center | Hp | 7.3-e0605 (including) | 7.3-e0605 (including) |
| Intelligent_management_center | Hp | 7.3-e0605h02 (including) | 7.3-e0605h02 (including) |
| Intelligent_management_center | Hp | 7.3-e0605h05 (including) | 7.3-e0605h05 (including) |
| Intelligent_management_center | Hp | 7.3-e0605p04 (including) | 7.3-e0605p04 (including) |
| Intelligent_management_center | Hp | 7.3-e0605p06 (including) | 7.3-e0605p06 (including) |
| Intelligent_management_center | Hp | 7.3-e0705 (including) | 7.3-e0705 (including) |
| Intelligent_management_center | Hp | 7.3-e0705p02 (including) | 7.3-e0705p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0705p04 (including) | 7.3-e0705p04 (including) |
| Intelligent_management_center | Hp | 7.3-e0705p06 (including) | 7.3-e0705p06 (including) |