CVE-2016-4368

Critical

Published: 08/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

HPE Universal CMDB versions 10.0 through 10.21, Universal CMDB Configuration Manager versions 10.0 through 10.21, and Universal Discovery versions 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to upgrade to the latest version of the software to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.