Vulnerability · Published Nov 6, 2020 · Assigned by hpe
CVE-2020-7198
High 8.8
In plain English
A high-severity security flaw in HP OneView; HPE Synergy Composer; HPE Synergy Composer 2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 81% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)2.1%top 18.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HP OneView; HPE Synergy Composer; HPE Synergy Composer 2 | 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 |