Lucene search

K
cve[email protected]CVE-2020-7169
HistoryOct 19, 2020 - 6:15 p.m.

CVE-2020-7169

2020-10-1918:15:16
CWE-917
web.nvd.nist.gov
49
hpe
imc
plat
vulnerability
cve-2020-7169
code execution
remote code execution
security
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.9%

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Affected configurations

NVD
Node
hpintelligent_management_centerRange<7.3
OR
hpintelligent_management_centerMatch7.3-
OR
hpintelligent_management_centerMatch7.3e0501
OR
hpintelligent_management_centerMatch7.3e0503
OR
hpintelligent_management_centerMatch7.3e0503p02
OR
hpintelligent_management_centerMatch7.3e0504
OR
hpintelligent_management_centerMatch7.3e0504p02
OR
hpintelligent_management_centerMatch7.3e0504p04
OR
hpintelligent_management_centerMatch7.3e0504p2
OR
hpintelligent_management_centerMatch7.3e0504p4
OR
hpintelligent_management_centerMatch7.3e0506
OR
hpintelligent_management_centerMatch7.3e0506p02
OR
hpintelligent_management_centerMatch7.3e0506p03
OR
hpintelligent_management_centerMatch7.3e0506p07
OR
hpintelligent_management_centerMatch7.3e0506p09
OR
hpintelligent_management_centerMatch7.3e0605
OR
hpintelligent_management_centerMatch7.3e0605h02
OR
hpintelligent_management_centerMatch7.3e0605h05
OR
hpintelligent_management_centerMatch7.3e0605p04
OR
hpintelligent_management_centerMatch7.3e0605p06
OR
hpintelligent_management_centerMatch7.3e0705
OR
hpintelligent_management_centerMatch7.3e0705p02
OR
hpintelligent_management_centerMatch7.3e0705p04
OR
hpintelligent_management_centerMatch7.3e0705p06

CNA Affected

[
  {
    "product": "HPE Intelligent Management Center (iMC)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to iMC PLAT 7.3 (E0705P07)"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.9%

Related for CVE-2020-7169