CVE-2016-4372 HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAM_TAM before 7.2 E0405P05 allow remote....
CriticalCVSS 9.8
EPSS 19.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAM_TAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc intelligent management center application performance manager | <= 7.2 | No fix listed |
| HP Inc intelligent management center branch intelligent management system | <= 7.2 | No fix listed |
| HP Inc intelligent management center endpoint admission defense | <= 7.2 | No fix listed |
| HP Inc intelligent management center network traffic analyzer | <= 7.2 | No fix listed |
| HP Inc intelligent management center platform | <= 7.2 | No fix listed |
| HP Inc intelligent management center user access management | <= 7.2 | No fix listed |
References
- 91739 vdb-entry
- h20566.www2.hpe.com vendor-advisory
- 42756 exploit