CVE-2020-7132 A potential security vulnerability has been identified in HPE Onboard Administrator.

What is CVE-2020-7132?

CVE-2020-7132 is a medium-severity vulnerability in HPE Onboard Administrator, published on 23 Apr 2020.

Official description

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard Administrator. * OA 4.95 (Linux and Windows).

Weakness: CWE-79

Which versions are affected by CVE-2020-7132?

It affects 1 product.

Products include Hp Onboard Administrator.

How do I fix CVE-2020-7132?

No fix has been published for CVE-2020-7132 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-7132 being exploited?

There is no known exploitation of CVE-2020-7132 in the wild and no public exploit code.

Other vulnerabilities in HPE Onboard Administrator

• CVE-2012-0129 Auth bypass in n/a High 7.6
• CVE-2011-3155 Auth bypass in n/a Medium 6.4
• CVE-2012-0128 Open redirect in n/a Medium 5.8
• CVE-2012-0130 HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors. Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wx72-ghfr-hc8q.