critical9.8
CVE-2016-4368
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attacke…
Impact
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Universal Cmbd Foundation | Versions 10.0, 10.01, 10.10, 10.11, 10.20, 10.21 |
| Hp | Universal Cmbd Configuration Manager | Versions 10.0, 10.01, 10.10, 10.11, 10.20, 10.21 |
| Hp | Universal Discovery | Versions 10.0, 10.01, 10.10, 10.11, 10.20, 10.21 |