CVE-2016-4373

Published: Aug 1, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected (6)

Products: Hp: Operations Manager

1 product

Operations Manager

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Hp Operations Manager	Up to 9.21.120
Hp Operations Manager	Up to 9.21.120
Hp Operations Manager	Up to 9.21.120
Hp Operations Manager	Version 9.20.0
Hp Operations Manager	Version 9.20.0
Hp Operations Manager	Version 9.20.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

http://www.securityfocus.com/bid/92122

Source: cve@mitre.org

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05206507

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/92122

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05206507

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.