CVE-2020-7187

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-917

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71888.8A userselectpagingcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenCVE-2020-71898.8A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management CeCVE-2020-71908.8A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) vCVE-2020-71918.8A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) verCVE-2020-71928.8A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenteCVE-2020-71938.8A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CenterCVE-2020-71948.8A perfaddormoddevicemonitor expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management CCVE-2020-71958.8A iccselectrules expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC)CVE-2020-71966.5The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive KerbCVE-2020-71979.8SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray managerCVE-2020-71988.8There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has CVE-2020-71999.8A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Managemen
CVE-2020-7187: High severity, CVSS 8.8 | Vulnix