CVE-2020-7130

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or Install of OVGD Version 1.9, Appliance Firewall May Leave Ports Open. This is resolved in OVGD 1.91 or later.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Mar 4, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-71319.0This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products.CVE-2020-71325.4A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow CVE-2020-71339.8A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.CVE-2020-71346.5A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.CVE-2020-71357.8A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Co CVE-2020-71369.8A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard En CVE-2020-71376.7A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.2 CVE-2020-71388.8Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an CVE-2020-71398.1Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker CVE-2020-71406.1A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site sc CVE-2020-71419.8A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC CVE-2020-71429.8A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (i