High severity8.8NVD Advisory· Published Nov 6, 2020· Updated Jun 17, 2026

CVE-2020-7198

Description

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

Affected products

HPE/Synergy Composerllm-create
Range: before 5.5
HPE/Composer2llm-create
Range: before 5.5
HPE/OneViewllm-fuzzy
Range: before 5.5

Patches

Vulnerability mechanics

References

support.hpe.com/hpsc/doc/public/displaynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000