Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-7159
HistoryOct 19, 2020 - 6:15 p.m.

CVE-2020-7159

2020-10-1918:15:15
CWE-917
[email protected]
web.nvd.nist.gov
1
custom template select
expression language injection
remote code execution
vulnerability
hpe imc plat 7.3

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

79.0%

JSON

A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Affected configurations

Nvd
Node
hpintelligent_management_centerRange<7.3
OR
hpintelligent_management_centerMatch7.3-
OR
hpintelligent_management_centerMatch7.3e0501
OR
hpintelligent_management_centerMatch7.3e0503
OR
hpintelligent_management_centerMatch7.3e0503p02
OR
hpintelligent_management_centerMatch7.3e0504
OR
hpintelligent_management_centerMatch7.3e0504p02
OR
hpintelligent_management_centerMatch7.3e0504p04
OR
hpintelligent_management_centerMatch7.3e0504p2
OR
hpintelligent_management_centerMatch7.3e0504p4
OR
hpintelligent_management_centerMatch7.3e0506
OR
hpintelligent_management_centerMatch7.3e0506p02
OR
hpintelligent_management_centerMatch7.3e0506p03
OR
hpintelligent_management_centerMatch7.3e0506p07
OR
hpintelligent_management_centerMatch7.3e0506p09
OR
hpintelligent_management_centerMatch7.3e0605
OR
hpintelligent_management_centerMatch7.3e0605h02
OR
hpintelligent_management_centerMatch7.3e0605h05
OR
hpintelligent_management_centerMatch7.3e0605p04
OR
hpintelligent_management_centerMatch7.3e0605p06
OR
hpintelligent_management_centerMatch7.3e0705
OR
hpintelligent_management_centerMatch7.3e0705p02
OR
hpintelligent_management_centerMatch7.3e0705p04
OR
hpintelligent_management_centerMatch7.3e0705p06
VendorProductVersionCPE
hpintelligent_management_center*cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:-:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0501:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0503:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p04:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p2:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p4:*:*:*:*:*:*
Rows per page:
1-10 of 241

Related

zdi 1
prion 1
cvelist 1
cve 1
attackerkb 1
zdi
zdi
(0Day) Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability
2020-02-04 00:00:00
prion
prion
Remote code execution
2020-10-19 18:15:00
cvelist
cvelist
CVE-2020-7159
2020-10-19 17:39:02
cve
cve
CVE-2020-7159
2020-10-19 18:15:15
attackerkb
attackerkb
Multiple vulnerabilities in HPE Intelligent Management Center (IMC) before E0705P07
2020-10-29 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

79.0%

JSON
Related for NVD:CVE-2020-7159
zdi1prion1cvelist1cve1attackerkb1