CVE-2016-1998

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Score
CVSS 3.0 9.8 Critical
Status
Modified - cve@mitre.org
Published
2016-03-22
Last modified
2024-08-05
Weaknesses
CWE-20

Affected products

References