VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 22, 2016· Updated Jun 17, 2026

CVE-2016-1998

CVE-2016-1998

Description

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

9
  • Microfocus/Service Manager8 versions
    cpe:2.3:a:hp:service_manager:9.30:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:hp:service_manager:9.30:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.31:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.32:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.33:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.34:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.35:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.40:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_manager:9.41:*:*:*:*:*:*:*
  • HPE/Service Managerllm-create
    Range: 9.3x before 9.35 P4 and 9.4x before 9.41.P2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.