CVE-2016-4373 The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache...
CriticalCVSS 9.8
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc operations manager | <= 9.21.120 | No fix listed |
| HP Inc operations manager | = 9.20.0 | No fix listed |
References
- 92122 vdb-entry
- h20566.www2.hpe.com vendor-advisory