CVE-2020-7136

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager (SUM) prior to 8.5.6. Please visit the HPE Support Center at https://support.hpe.com/hpesc/public/home to download the latest version of HPE Smart Update Manager (SUM). Download the latest version of HPE Smart Update Manager (SUM) or download the latest Service Pack For ProLiant (SPP).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Apr 30, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71376.7A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.2CVE-2020-71388.8Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an CVE-2020-71398.1Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attackerCVE-2020-71406.1A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scCVE-2020-71419.8A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCCVE-2020-71429.8A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iCVE-2020-71439.8A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71449.8A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (CVE-2020-71459.8A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71469.8A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71479.8A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center CVE-2020-71489.8A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center
CVE-2020-7136: Critical severity, CVSS 9.8 | Vulnix