csirt@kutim:~/threat-intel/cve/CVE-2020-24647

Katalog CVE

CVSS 9.8 · Critical EPSS 4,2%

Kerentanan Improper Input Validation pada hp intelligent management center. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Rincian

Terbit di NVD
19 Oktober 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
4,2% peluang dieksploitasi; lebih tinggi dari 90,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hp intelligent management center Semua versi sebelum 7.3
hp intelligent management center Versi 7.3
hp intelligent management center Versi 7.3 e0501
hp intelligent management center Versi 7.3 e0503
hp intelligent management center Versi 7.3 e0503p02
hp intelligent management center Versi 7.3 e0504
hp intelligent management center Versi 7.3 e0504p02
hp intelligent management center Versi 7.3 e0504p04
hp intelligent management center Versi 7.3 e0504p2
hp intelligent management center Versi 7.3 e0504p4
hp intelligent management center Versi 7.3 e0506
hp intelligent management center Versi 7.3 e0506p02
hp intelligent management center Versi 7.3 e0506p03
hp intelligent management center Versi 7.3 e0506p07
hp intelligent management center Versi 7.3 e0506p09
hp intelligent management center Versi 7.3 e0605
hp intelligent management center Versi 7.3 e0605h02
hp intelligent management center Versi 7.3 e0605h05
hp intelligent management center Versi 7.3 e0605p04
hp intelligent management center Versi 7.3 e0605p06
hp intelligent management center Versi 7.3 e0705
hp intelligent management center Versi 7.3 e0705p02
hp intelligent management center Versi 7.3 e0705p04
hp intelligent management center Versi 7.3 e0705p06

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.