CVE-2020-7198

CVE-2020-7198 describes a remote escalation of privilege vulnerability affecting HPE OneView and Synergy Composer products. A malicious user with an existing OneView account could exploit this flaw to gain elevated privileges. The vulnerability carries a high CVSS score of 8.8, indicating a severe risk with network-based exploitation, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit intelligence (Metasploit, Nuclei, ExploitDB) or active exploitation has been observed, HPE has released updates (OneView/Composer version 5.5) to mitigate this issue.