CVE-2016-2009

High

Published: 07/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Risk Assessment

This vulnerability may lead to unauthorized access and execution of malicious code on the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update HPE Network Node Manager i to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Other vulnerabilities in HPE Network Node Manager i (NNMi)

CVE-2016-2014High
HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allow remote authenticated users to modify data or cause a denial of service via unspecified vectors.

Original NVD description (English source)

HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.