CVE-2020-7143

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-917

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71449.8A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (CVE-2020-71459.8A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71469.8A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71479.8A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center CVE-2020-71489.8A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71499.8A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71509.8A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeCVE-2020-71519.8A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71529.8A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) CVE-2020-71539.8A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71549.8A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71559.8A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version
CVE-2020-7143: Critical severity, CVSS 9.8 | Vulnix