CVE-2016-4369

HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2016-06-08

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Discovery And Dependency Mapping Inventory (Hp)

References

• https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05164819