CVE-2016-1997

Critical

Published: 22/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HPE Operations Orchestration versions 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise and data exposure for the organization.

Recommendation

It is recommended to update HPE Operations Orchestration to version 10.51 or later and the content to version 1.7.0 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.