CVE-2020-7134

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Apr 24, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71357.8A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash CoCVE-2020-71369.8A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard EnCVE-2020-71376.7A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.2CVE-2020-71388.8Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an CVE-2020-71398.1Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attackerCVE-2020-71406.1A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scCVE-2020-71419.8A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCCVE-2020-71429.8A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iCVE-2020-71439.8A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71449.8A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (CVE-2020-71459.8A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71469.8A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)
CVE-2020-7134: Medium severity, CVSS 6.5 | Vulnix