# Vulnerabilities published in 2020 - [CVE-2020-7177](https://insights.sbomify.com/CVE-2020-7177/): Code injection in HPE Intelligent Management Center (iMC) (high 8.8) - [CVE-2020-7176](https://insights.sbomify.com/CVE-2020-7176/): Code injection in HPE Intelligent Management Center (iMC) (high 8.8) - [CVE-2020-7175](https://insights.sbomify.com/CVE-2020-7175/): Code injection in HPE Intelligent Management Center (iMC) (high 8.8) - [CVE-2020-7174](https://insights.sbomify.com/CVE-2020-7174/): Code injection in HPE Intelligent Management Center (iMC) (high 8.8) - [CVE-2020-7173](https://insights.sbomify.com/CVE-2020-7173/): Code injection in HPE Intelligent Management Center (iMC) (high 8.8) - [CVE-2020-7172](https://insights.sbomify.com/CVE-2020-7172/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7171](https://insights.sbomify.com/CVE-2020-7171/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7170](https://insights.sbomify.com/CVE-2020-7170/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7169](https://insights.sbomify.com/CVE-2020-7169/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7168](https://insights.sbomify.com/CVE-2020-7168/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7167](https://insights.sbomify.com/CVE-2020-7167/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7166](https://insights.sbomify.com/CVE-2020-7166/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7165](https://insights.sbomify.com/CVE-2020-7165/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7164](https://insights.sbomify.com/CVE-2020-7164/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7163](https://insights.sbomify.com/CVE-2020-7163/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7162](https://insights.sbomify.com/CVE-2020-7162/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7161](https://insights.sbomify.com/CVE-2020-7161/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7160](https://insights.sbomify.com/CVE-2020-7160/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7159](https://insights.sbomify.com/CVE-2020-7159/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7158](https://insights.sbomify.com/CVE-2020-7158/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7157](https://insights.sbomify.com/CVE-2020-7157/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7156](https://insights.sbomify.com/CVE-2020-7156/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7155](https://insights.sbomify.com/CVE-2020-7155/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7154](https://insights.sbomify.com/CVE-2020-7154/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7153](https://insights.sbomify.com/CVE-2020-7153/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7152](https://insights.sbomify.com/CVE-2020-7152/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7151](https://insights.sbomify.com/CVE-2020-7151/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7150](https://insights.sbomify.com/CVE-2020-7150/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7149](https://insights.sbomify.com/CVE-2020-7149/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7148](https://insights.sbomify.com/CVE-2020-7148/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7147](https://insights.sbomify.com/CVE-2020-7147/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7146](https://insights.sbomify.com/CVE-2020-7146/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7145](https://insights.sbomify.com/CVE-2020-7145/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7144](https://insights.sbomify.com/CVE-2020-7144/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7143](https://insights.sbomify.com/CVE-2020-7143/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7142](https://insights.sbomify.com/CVE-2020-7142/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7141](https://insights.sbomify.com/CVE-2020-7141/): Code injection in HPE Intelligent Management Center (iMC) (critical 9.8) - [CVE-2020-7140](https://insights.sbomify.com/CVE-2020-7140/): Cross-site scripting in IceWall SSO Dfw; IceWall SSO Dgfw (medium 6.1) - [CVE-2020-7139](https://insights.sbomify.com/CVE-2020-7139/): Other in HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays (high 8.1) - [CVE-2020-7138](https://insights.sbomify.com/CVE-2020-7138/): Other in HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays (high 8.8) - [CVE-2020-7137](https://insights.sbomify.com/CVE-2020-7137/): Privilege escalation in HPE Superdome Flex Server (medium 6.7) - [CVE-2020-7136](https://insights.sbomify.com/CVE-2020-7136/): Other in Smart Update Manager (SUM) (critical 9.8) - [CVE-2020-7135](https://insights.sbomify.com/CVE-2020-7135/): Other in HPE Business Critical Hard Drives (high 7.8) - [CVE-2020-7134](https://insights.sbomify.com/CVE-2020-7134/): Information disclosure in HPE IOT + GCP (medium 6.5) - [CVE-2020-7133](https://insights.sbomify.com/CVE-2020-7133/): Auth bypass in HPE IOT + GCP (critical 9.8) - [CVE-2020-7132](https://insights.sbomify.com/CVE-2020-7132/): Cross-site scripting in HPE Onboard Administrator (medium 5.4) - [CVE-2020-7131](https://insights.sbomify.com/CVE-2020-7131/): Memory corruption in Integrated Maintenance Entity T1805; Maintenance Entity T2805; Blade Maintenance Entity FW T4805 (critical 9.0) - [CVE-2020-7130](https://insights.sbomify.com/CVE-2020-7130/): Misconfiguration in HPE OneView Global Dashboard (high 7.5) - [CVE-2020-7129](https://insights.sbomify.com/CVE-2020-7129/): Command injection in Aruba Airwave Software (high 7.2) - [CVE-2020-7128](https://insights.sbomify.com/CVE-2020-7128/): Auth bypass in Aruba Airwave Software (critical 9.8) - [CVE-2020-7127](https://insights.sbomify.com/CVE-2020-7127/): Other in Aruba Airwave Software (critical 9.8) - [CVE-2020-7126](https://insights.sbomify.com/CVE-2020-7126/): Server-side request forgery in Aruba Airwave Software (medium 5.8) - [CVE-2020-7125](https://insights.sbomify.com/CVE-2020-7125/): Privilege escalation in Aruba Airwave Software (high 8.8) - [CVE-2020-7124](https://insights.sbomify.com/CVE-2020-7124/): Auth bypass in Aruba Airwave Software (critical 9.8) - [CVE-2020-7123](https://insights.sbomify.com/CVE-2020-7123/): Privilege escalation in Aruba ClearPass Policy Manager (high 7.8) - [CVE-2020-7122](https://insights.sbomify.com/CVE-2020-7122/): Memory corruption in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400 (high 7.5) - [CVE-2020-7121](https://insights.sbomify.com/CVE-2020-7121/): Memory corruption in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400 (high 7.5) - [CVE-2020-7120](https://insights.sbomify.com/CVE-2020-7120/): Memory corruption in Aruba ClearPass Policy Manager (medium 5.3) - [CVE-2020-7119](https://insights.sbomify.com/CVE-2020-7119/): Privilege escalation in Aruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance (medium 4.9) - [CVE-2020-7117](https://insights.sbomify.com/CVE-2020-7117/): Command injection in ClearPass Policy Manager (high 7.2) - [CVE-2020-7116](https://insights.sbomify.com/CVE-2020-7116/): Command injection in ClearPass Policy Manager (high 7.2) - [CVE-2020-7115](https://insights.sbomify.com/CVE-2020-7115/): Auth bypass in ClearPass Policy Manager (critical 9.8) - [CVE-2020-7114](https://insights.sbomify.com/CVE-2020-7114/): Missing authorization in ClearPass Policy Manager (critical 9.8) - [CVE-2020-7113](https://insights.sbomify.com/CVE-2020-7113/): Other in ClearPass Policy Manager (medium 4.9) - [CVE-2020-7111](https://insights.sbomify.com/CVE-2020-7111/): Code injection in ClearPass Policy Manager (high 7.2) - [CVE-2020-7110](https://insights.sbomify.com/CVE-2020-7110/): Cross-site scripting in ClearPass Policy Manager (medium 4.8) - [CVE-2020-7109](https://insights.sbomify.com/CVE-2020-7109/): Cross-site scripting in elementor:website builder (critical 9.8) - [CVE-2020-7108](https://insights.sbomify.com/CVE-2020-7108/): Cross-site scripting in learndash:learndash (medium 5.4) - [CVE-2020-7107](https://insights.sbomify.com/CVE-2020-7107/): Cross-site scripting in etoilewebdesign:ultimate faq (medium 6.1) - [CVE-2020-7106](https://insights.sbomify.com/CVE-2020-7106/): Cross-site scripting in cacti:cacti (medium 6.1) - [CVE-2020-7105](https://insights.sbomify.com/CVE-2020-7105/): Null dereference in debian:debian linux (high 7.5) - [CVE-2020-7104](https://insights.sbomify.com/CVE-2020-7104/): Cross-site scripting in kibokolabs:chained quiz (medium 6.1) - [CVE-2020-7085](https://insights.sbomify.com/CVE-2020-7085/): Memory corruption in Autodesk FBX-SDK (high 7.8) - [CVE-2020-7084](https://insights.sbomify.com/CVE-2020-7084/): Null dereference in Autodesk FBX-SDK (medium 5.5) - [CVE-2020-7083](https://insights.sbomify.com/CVE-2020-7083/): Integer overflow in Autodesk FBX-SDK (medium 6.5) - [CVE-2020-7082](https://insights.sbomify.com/CVE-2020-7082/): Use after free in Autodesk FBX-SDK (high 8.8) - [CVE-2020-7081](https://insights.sbomify.com/CVE-2020-7081/): Memory corruption in Autodesk FBX-SDK (high 8.8) - [CVE-2020-7080](https://insights.sbomify.com/CVE-2020-7080/): Memory corruption in Autodesk FBX-SDK (high 7.8) - [CVE-2020-7079](https://insights.sbomify.com/CVE-2020-7079/): Code injection in Autodesk Dynamo BIM (high 7.8) - [CVE-2020-7071](https://insights.sbomify.com/CVE-2020-7071/): FILTER_VALIDATE_URL accepts URLs with invalid userinfo (medium 5.3) - [CVE-2020-7070](https://insights.sbomify.com/CVE-2020-7070/): PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (medium 4.3) - [CVE-2020-7069](https://insights.sbomify.com/CVE-2020-7069/): Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (medium 5.4) - [CVE-2020-7068](https://insights.sbomify.com/CVE-2020-7068/): Use of freed hash key in the phar_parse_zipfile function (medium 4.8) - [CVE-2020-7067](https://insights.sbomify.com/CVE-2020-7067/): OOB Read in urldecode() (high 7.5) - [CVE-2020-7066](https://insights.sbomify.com/CVE-2020-7066/): get_headers() silently truncates after a null byte (medium 5.3) - [CVE-2020-7065](https://insights.sbomify.com/CVE-2020-7065/): mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full (high 7.4) - [CVE-2020-7064](https://insights.sbomify.com/CVE-2020-7064/): Use-of-uninitialized-value in exif (medium 6.5) - [CVE-2020-7063](https://insights.sbomify.com/CVE-2020-7063/): Files added to tar with Phar::buildFromIterator have all-access permissions (medium 5.5) - [CVE-2020-7062](https://insights.sbomify.com/CVE-2020-7062/): Null Pointer Dereference in PHP Session Upload Progress (high 7.5) - [CVE-2020-7061](https://insights.sbomify.com/CVE-2020-7061/): heap-buffer-overflow in phar_extract_file (medium 6.5) - [CVE-2020-7060](https://insights.sbomify.com/CVE-2020-7060/): global buffer-overflow in mbfl_filt_conv_big5_wchar (medium 6.5) - [CVE-2020-7059](https://insights.sbomify.com/CVE-2020-7059/): OOB read in php_strip_tags_ex (medium 6.5) - [CVE-2020-7058](https://insights.sbomify.com/CVE-2020-7058/): Code injection in cacti:cacti (high 8.8) - [CVE-2020-7057](https://insights.sbomify.com/CVE-2020-7057/): Information disclosure in hikvision:ds-7204hghi-f1 firmware (medium 5.3) - [CVE-2020-7055](https://insights.sbomify.com/CVE-2020-7055/): File upload in elementor:elementor page builder (critical 9.9) - [CVE-2020-7054](https://insights.sbomify.com/CVE-2020-7054/): Memory corruption in mz-automation:libiec61850 (high 8.8) - [CVE-2020-7053](https://insights.sbomify.com/CVE-2020-7053/): Use after free in linux:linux kernel (high 7.8) - [CVE-2020-7052](https://insights.sbomify.com/CVE-2020-7052/): Denial of service in codesys:control for beaglebone (medium 6.5) - [CVE-2020-7051](https://insights.sbomify.com/CVE-2020-7051/): Cross-site scripting in codologic:codoforum (medium 6.1) - [CVE-2020-7050](https://insights.sbomify.com/CVE-2020-7050/): Cross-site scripting in codologic:codoforum (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/42/