NetSight
critical9.8

CVE-2016-1997

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a cra…

Impact

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

VendorProductAffected versions
HpOperations Orchestration
Versions 10.0, 10.01, 10.02, 10.10, 10.20, 10.21
HpOperations Orchestration Content
through 1.5.3

Weakness classification

References