CVE-2016-1999 The server in HP Release Control 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
CriticalCVSS 9.8
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The server in HP Release Control 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc release control | = 9.13 | No fix listed |
| HP Inc release control | = 9.20 | No fix listed |
| HP Inc release control | = 9.21 | No fix listed |
References
- 90778 vdb-entry
- h20566.www2.hpe.com patch vendor-advisory