NetSight
critical9.8

CVE-2016-2000

HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted seriali…

Impact

HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected products

VendorProductAffected versions
HpAsset Manager
Versions 9.40, 9.41, 9.50
HpAsset Manager Cloudsystem Chargeback
Version 9.40

Weakness classification

References