CVE-2020-7172

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A templateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-917

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71738.8A actionselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center CVE-2020-71748.8A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iCVE-2020-71758.8A iccselectdymicparam expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center CVE-2020-71768.8A viewtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeCVE-2020-71778.8A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71788.8A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71798.8A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CeCVE-2020-71808.8A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iCVE-2020-71818.8A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCVE-2020-71828.8A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versCVE-2020-71838.8A forwardredirect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMCCVE-2020-71848.8A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Manageme
CVE-2020-7172: Critical severity, CVSS 9.8 | Vulnix