VYPR
Get started
← All advisories
High severity8.8NVD Advisory· Published May 7, 2016· Updated May 6, 2026

CVE-2016-2009

CVE-2016-2009

Description

HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected products

6
  • HP/Network Node Manager I6 versions
    cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_node_manager_i:10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_node_manager_i:9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_node_manager_i:9.23:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_node_manager_i:9.24:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_node_manager_i:9.25:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.