What is CVE-2020-7198?

CVE-2020-7198 is a high-severity vulnerability in Hp Oneview. CVSS score: 8.8/10. Published 2020-11-06.

How severe is CVE-2020-7198?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Hp Oneview

CVE-2020-7198

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Co…

EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hp Oneview — versions 5.0, 5.00.01, 5.00.02
Hp Synergy_composer — versions 5.0, 5.00.01, 5.00.02
Hp Synergy_composer_2 — versions 5.0, 5.00.01, 5.00.02
N/a Hp Oneview; Hpe Synergy Composer; Composer 2 — versions 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4

References

security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7198?: CVE-2020-7198 is a high-severity vulnerability in Hp Oneview. CVSS score: 8.8/10. Published 2020-11-06.
How severe is CVE-2020-7198?: High severity. CVSS v3 base score is 8.8 out of 10.