CVE-2016-4373

Critical

Published: 01/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The AdminUI in HPE Operations Manager (OM) before version 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Risk Assessment

An attacker can remotely take control of the system, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to upgrade HPE Operations Manager to version 9.21.130 or later to mitigate this vulnerability.

Original NVD description (English source)

The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.