Critical severity9.8NVD Advisory· Published Feb 12, 2016· Updated Jun 17, 2026

CVE-2016-1986

Description

HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

Microfocus/Continuous Delivery Automation
cpe:2.3:a:hp:continuous_delivery_automation:1.3.0:*:*:*:*:*:*:*
Arubanetworks/Continuous Delivery Automationllm-create
Range: <=1.30

Patches

Vulnerability mechanics

References

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000