CVE-2016-1998

Critical

Published: 22/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HPE Service Manager versions 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to update HPE Service Manager to the latest version to mitigate this vulnerability.

Original NVD description (English source)

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.