NetSight
critical9.8

CVE-2016-1998

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object…

Impact

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

VendorProductAffected versions
HpService Manager
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35

Weakness classification

References