CVE-2016-1997

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Score
CVSS 3.0 9.8 Critical
Status
Modified - cve@mitre.org
Published
2016-03-22
Last modified
2024-08-05
Weaknesses
CWE-20

Affected products

References