CVE-2020-7151 A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

CriticalCVSS 9.8 EPSS 7.0%

Published: 2020-10-19 20:38
Updated: 2026-06-17 06:24
Exploit status: No public exploit known

Description

A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Affected products

Product	Affected versions	Fixed in
HP Inc intelligent management center	< 7.3	7.3
HP Inc intelligent management center	= 7.3	No fix listed
HP Inc intelligent management center	= 7.3-e0501	No fix listed
HP Inc intelligent management center	= 7.3-e0503	No fix listed
HP Inc intelligent management center	= 7.3-e0503p02	No fix listed
HP Inc intelligent management center	= 7.3-e0504	No fix listed
HP Inc intelligent management center	= 7.3-e0504p02	No fix listed
HP Inc intelligent management center	= 7.3-e0504p04	No fix listed
HP Inc intelligent management center	= 7.3-e0504p2	No fix listed
HP Inc intelligent management center	= 7.3-e0504p4	No fix listed
HP Inc intelligent management center	= 7.3-e0506	No fix listed
HP Inc intelligent management center	= 7.3-e0506p02	No fix listed
HP Inc intelligent management center	= 7.3-e0506p03	No fix listed
HP Inc intelligent management center	= 7.3-e0506p07	No fix listed
HP Inc intelligent management center	= 7.3-e0506p09	No fix listed
HP Inc intelligent management center	= 7.3-e0605	No fix listed
HP Inc intelligent management center	= 7.3-e0605h02	No fix listed
HP Inc intelligent management center	= 7.3-e0605h05	No fix listed
HP Inc intelligent management center	= 7.3-e0605p04	No fix listed
HP Inc intelligent management center	= 7.3-e0605p06	No fix listed
HP Inc intelligent management center	= 7.3-e0705	No fix listed
HP Inc intelligent management center	= 7.3-e0705p02	No fix listed
HP Inc intelligent management center	= 7.3-e0705p04	No fix listed
HP Inc intelligent management center	= 7.3-e0705p06	No fix listed

References

support.hpe.com vendor-advisory

CVSS v3.1

9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.1 9.8 · nvd@nist.gov
v2.0 10.0 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 6.99% (percentile 94.3)
CWE: CWE-917

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.