What’s Vulnerable › Vulnerabilities

CVE-2020-7206

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-17 · updated 2026-06-17
• Weakness: CWE-78

Description

HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability.

Affected products

• nagios-plugins-ilo: through 1.50

References

• https://github.com/HewlettPackard/nagios-plugins-hpilo/commit/7617b2736a95c7f354198f092febe37e7005c677
• https://github.com/HewlettPackard/nagios-plugins-hpilo/commit/7617b2736a95c7f354198f092febe37e7005c677

Get alerted when CVE-2020-7206 or the next vulnerability affects your stack