CVE-2020-7156

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A faultinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-917

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71579.8A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iCVE-2020-71589.8A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71599.8A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71609.8A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenteCVE-2020-71619.8A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71629.8A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CVE-2020-71639.8A navigationto expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) vCVE-2020-71649.8A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCCVE-2020-71659.8A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71669.8A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent ManagemCVE-2020-71679.8A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center CVE-2020-71689.8A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC