CVE-2020-7139

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected software

VendorProductVersions
n/aHPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays3.9.2.0 and older, 4.5.5.0 and older, 5.0.8.0 and older, 5.1.4.0 and older

References

Timeline

Published
May 19, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71406.1A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scCVE-2020-71419.8A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCCVE-2020-71429.8A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iCVE-2020-71439.8A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71449.8A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (CVE-2020-71459.8A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71469.8A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71479.8A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center CVE-2020-71489.8A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71499.8A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71509.8A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeCVE-2020-71519.8A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center