VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 6, 2020· Updated Jun 17, 2026

CVE-2020-7198

CVE-2020-7198

Description

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

Affected products

24
  • Microfocus/Oneview7 versions
    cpe:2.3:a:hp:oneview:5.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:hp:oneview:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:oneview:5.00.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:oneview:5.00.02:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:oneview:5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:oneview:5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:oneview:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:oneview:5.20.01:*:*:*:*:*:*:*
  • Microfocus/Synergy Composer7 versions
    cpe:2.3:a:hp:synergy_composer:5.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:hp:synergy_composer:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer:5.00.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer:5.00.02:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer:5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer:5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer:5.20.01:*:*:*:*:*:*:*
  • Microfocus/Synergy Composer 27 versions
    cpe:2.3:a:hp:synergy_composer_2:5.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:hp:synergy_composer_2:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer_2:5.00.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer_2:5.00.02:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer_2:5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer_2:5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer_2:5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:synergy_composer_2:5.20.01:*:*:*:*:*:*:*
  • HPE/OneViewllm-fuzzy
    Range: before 5.5
  • HPE/Synergy Composerllm-create
    Range: before 5.5
  • HPE/Composer2llm-create
    Range: before 5.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.