CVE-2016-2003

Critical

Published: 20/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HPE P9000 Command View Advanced Edition Software (CVAE) versions 7.x and 8.x before 8.4.0-00 and XP7 CVAE versions 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Risk Assessment

An attacker can remotely access the system and execute unauthorized commands, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update the software to version 8.4.0-00 or later to mitigate this vulnerability.

Original NVD description (English source)

HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.