CVE-2020-7198

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-06 · updated 2026-06-17

Description

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

Affected products

Hewlett Packard Enterprise (HPE) HPE OneView: 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4 (+1)
HP Synergy Composer: 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4 (+1)
HP Synergy Composer 2: 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4 (+1)

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us

Get alerted when CVE-2020-7198 or the next vulnerability affects your stack