Critical severity9.8NVD Advisory· Published Apr 5, 2016· Updated May 6, 2026
CVE-2016-2000
CVE-2016-2000
Description
HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected products
4cpe:2.3:a:hp:asset_manager:9.40:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hp:asset_manager:9.40:*:*:*:*:*:*:*
- cpe:2.3:a:hp:asset_manager:9.41:*:*:*:*:*:*:*
- cpe:2.3:a:hp:asset_manager:9.50:*:*:*:*:*:*:*
- cpe:2.3:a:hp:asset_manager_cloudsystem_chargeback:9.40:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.