CVE-2020-7178: hp intelligent management center

csirt@kutim:~/threat-intel/cve/CVE-2020-7178

CVSS 8.8 · High EPSS 3,4%

Kerentanan Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') pada hp intelligent management center. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Rincian

Terbit di NVD: 19 Oktober 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
EPSS (30 hari): 3,4% peluang dieksploitasi; lebih tinggi dari 88,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
hp	intelligent management center	Semua versi sebelum 7.3
hp	intelligent management center	Versi 7.3
hp	intelligent management center	Versi 7.3 e0501
hp	intelligent management center	Versi 7.3 e0503
hp	intelligent management center	Versi 7.3 e0503p02
hp	intelligent management center	Versi 7.3 e0504
hp	intelligent management center	Versi 7.3 e0504p02
hp	intelligent management center	Versi 7.3 e0504p04
hp	intelligent management center	Versi 7.3 e0504p2
hp	intelligent management center	Versi 7.3 e0504p4
hp	intelligent management center	Versi 7.3 e0506
hp	intelligent management center	Versi 7.3 e0506p02
hp	intelligent management center	Versi 7.3 e0506p03
hp	intelligent management center	Versi 7.3 e0506p07
hp	intelligent management center	Versi 7.3 e0506p09
hp	intelligent management center	Versi 7.3 e0605
hp	intelligent management center	Versi 7.3 e0605h02
hp	intelligent management center	Versi 7.3 e0605h05
hp	intelligent management center	Versi 7.3 e0605h07
hp	intelligent management center	Versi 7.3 e0605h08
hp	intelligent management center	Versi 7.3 e0605h09
hp	intelligent management center	Versi 7.3 e0605p04
hp	intelligent management center	Versi 7.3 e0605p06
hp	intelligent management center	Versi 7.3 e0701
hp	intelligent management center	Versi 7.3 e0702
hp	intelligent management center	Versi 7.3 e0703
hp	intelligent management center	Versi 7.3 e0703h01
hp	intelligent management center	Versi 7.3 e0705
hp	intelligent management center	Versi 7.3 e0705p02

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.