critical9.8Public exploit code

CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

HPE < 7.2 - Java Deserialization2017-09-19 · remote · java

Impact

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAM_TAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected products

Vendor	Product	Affected versions
Hp	Intelligent Management Center Application Performance Manager	through 7.2
Hp	Intelligent Management Center Branch Intelligent Management System	through 7.2
Hp	Intelligent Management Center Endpoint Admission Defense	through 7.2
Hp	Intelligent Management Center Network Traffic Analyzer	through 7.2
Hp	Intelligent Management Center Platform	through 7.2
Hp	Intelligent Management Center User Access Management	through 7.2

Weakness classification

CWE-20

Public exploit code

Impact

Affected products

Weakness classification

References