CVE-2016-1997 HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to t...
CriticalCVSS 9.8
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc operations orchestration | = 10.0 | No fix listed |
| HP Inc operations orchestration | = 10.01 | No fix listed |
| HP Inc operations orchestration | = 10.02 | No fix listed |
| HP Inc operations orchestration | = 10.10 | No fix listed |
| HP Inc operations orchestration | = 10.20 | No fix listed |
| HP Inc operations orchestration | = 10.21 | No fix listed |
| HP Inc operations orchestration | = 10.22 | No fix listed |
| HP Inc operations orchestration | = 10.22.1 | No fix listed |
| HP Inc operations orchestration | = 10.50 | No fix listed |
| HP Inc operations orchestration content | <= 1.5.3 | No fix listed |
References
- h20566.www2.hpe.com patch vendor-advisory