CVE-2016-1998 HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collectio...
CriticalCVSS 9.8
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc service manager | = 9.30 | No fix listed |
| HP Inc service manager | = 9.31 | No fix listed |
| HP Inc service manager | = 9.32 | No fix listed |
| HP Inc service manager | = 9.33 | No fix listed |
| HP Inc service manager | = 9.34 | No fix listed |
| HP Inc service manager | = 9.35 | No fix listed |
| HP Inc service manager | = 9.40 | No fix listed |
| HP Inc service manager | = 9.41 | No fix listed |
References
- h20566.www2.hpe.com patch vendor-advisory