What’s Vulnerable › Vulnerabilities

CVE-2020-7136

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 80.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-04-30 · updated 2026-06-17

Description

A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager (SUM) prior to 8.5.6. Please visit the HPE Support Center at https://support.hpe.com/hpesc/public/home to download the latest version of HPE Smart Update Manager (SUM). Download the latest version of HPE Smart Update Manager (SUM) or download the latest Service Pack For ProLiant (SPP).

Affected products

• HPE Smart Update Manager: before 8.5.6 — fixed in 8.5.6

How to fix

Upgrade to a fixed version: HPE Smart Update Manager 8.5.6. Check the vendor advisory for mitigations.

References

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03997en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03997en_us

Get alerted when CVE-2020-7136 or the next vulnerability affects your stack