Known vulnerabilities in HPE iMC PLAT

Vendor: HPE
Software: HPE iMC PLAT
Software CPE: cpe:2.3:h:hpe:hpe_imc_plat:*:*:*:*:*:*:*:*
Website: https://www.hpe.com
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HPE iMC PLAT HPE iMC PLAT is affected by 20 known vulnerabilities: 2 critical, 11 high, 1 medium, 6 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16189 - Buffer overflow
CVE-2018-7116		 CWE-120 Low
No
No
 7.3 E0605P06 30.11.2018 SB2018113007
#VU16188 - Buffer overflow
CVE-2018-7115		 CWE-120 Low
No
No
 7.3 E0605P06 30.11.2018 SB2018113007
#VU16187 - Buffer overflow
CVE-2018-7114		 CWE-120 Low
No
No
 7.3 E0605P06 29.11.2018 SB2018113007
#VU15809 - Permissions, Privileges, and Access Controls
CVE-2018-7076		 CWE-264 High
No
No
 7.3 E0605P04 12.11.2018 SB2018092601
#VU14188 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-7092		 CWE-22 Medium
No
No
 7.3 E0605P04 02.08.2018 SB2018080306
#VU13981 - Permissions, Privileges, and Access Controls
CVE-2018-7074		 CWE-264 High
No
No
 7.3 E0605P04 20.07.2018 SB2018072309
#VU10321 - Permissions, Privileges, and Access Controls
CVE-2017-8983		 CWE-264 High
No
No
 - 29.01.2018 SB2018012907
#VU10320 - Permissions, Privileges, and Access Controls
CVE-2017-8984		 CWE-264 High
No
No
 - 29.01.2018 SB2018012907
#VU10259 - Permissions, Privileges, and Access Controls
CVE-2017-8981		 CWE-264 High
No
No
 - 26.01.2018 SB2018012506
SB2024072501
#VU10258 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8982		 CWE-200 Low
Available
No
 - 26.01.2018 SB2018012506
SB2024072501
#VU10220 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8980		 CWE-200 Low
No
No
 - 25.01.2018 SB2018012506
SB2024072501
#VU8976 - Deserialization of Untrusted Data
CVE-2017-8967		 CWE-502 High
No
No
 - 30.10.2017 SB2017103002
#VU8975 - Deserialization of Untrusted Data
CVE-2017-8966		 CWE-502 High
No
No
 - 30.10.2017 SB2017103002
#VU8974 - Deserialization of Untrusted Data
CVE-2017-8965		 CWE-502 High
No
No
 - 30.10.2017 SB2017103002
#VU8973 - Deserialization of Untrusted Data
CVE-2017-8964		 CWE-502 High
No
No
 - 30.10.2017 SB2017103002
#VU8972 - Deserialization of Untrusted Data
CVE-2017-8963		 CWE-502 High
No
No
 - 30.10.2017 SB2017103002
#VU8971 - Deserialization of Untrusted Data
CVE-2017-8962		 CWE-502 High
No
No
 - 30.10.2017 SB2017103002
#VU5468 - Memory corruption
CVE-2015-5122		 CWE-119 Critical
Available
Exploited
 7.1 E0303P16 27.01.2017 SB2015071001
SB2015071601
SB2015071602
and 5 more
#VU5416 - Heap-based Buffer Overflow
CVE-2015-3113		 CWE-122 Critical
Available
Exploited
 7.1 E0303P16 26.01.2017 SB2015062302
SB2015062401
SB2015071002
and 5 more
#VU802 - Improper Access Control
CVE-2010-1632		 CWE-284 Low
No
No
 - 27.09.2016 SB2010062201