CRITICAL🇵🇱 Wersja polska

CVE-2016-4368

CVSS 9.8v3.0pub. 2016-06-08upd. 2026-05-06

HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • HP Universal Cmbd Configuration Manager

    APP
    Hp
    10.010.0110.1010.1110.2010.21

  • HP Universal Cmbd Foundation

    APP
    Hp
    10.010.0110.1010.1110.2010.21

  • HP Universal Discovery

    APP
    Hp
    10.010.0110.1010.1110.2010.21
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-11853HIGH8.8ten sam produkt

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager a...

CVE-2016-4367HIGH7.5ten sam produkt

The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows rem...

CVE-2016-2001HIGH7.4ten sam produkt

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive...

CVE-2017-5638CRITICAL9.8⚠ KEVten sam vendor

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect ex...

CVE-2015-3113CRITICAL9.8⚠ KEVten sam vendor

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on ...