Critical severity9.8NVD Advisory· Published Apr 5, 2016· Updated Jun 17, 2026
CVE-2016-2000
CVE-2016-2000
Description
HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected products
6cpe:2.3:a:hp:asset_manager:9.40:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hp:asset_manager:9.40:*:*:*:*:*:*:*
- cpe:2.3:a:hp:asset_manager:9.41:*:*:*:*:*:*:*
- cpe:2.3:a:hp:asset_manager:9.50:*:*:*:*:*:*:*
- cpe:2.3:a:hp:asset_manager_cloudsystem_chargeback:9.40:*:*:*:*:*:*:*
- Range: 9.40, 9.41, 9.50
- Range: 9.40
Patches
Vulnerability mechanics
References
1- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.