VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 8, 2016· Updated Jun 17, 2026

CVE-2016-4368

CVE-2016-4368

Description

HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected products

21
  • Microfocus/UCMDB Configuration Manager6 versions
    cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.10:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.11:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.21:*:*:*:*:*:*:*
  • Microfocus/Universal Cmbd Foundation6 versions
    cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.10:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.11:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.21:*:*:*:*:*:*:*
  • Microfocus/Universal Discovery6 versions
    cpe:2.3:a:hp:universal_discovery:10.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hp:universal_discovery:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_discovery:10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_discovery:10.10:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_discovery:10.11:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_discovery:10.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_discovery:10.21:*:*:*:*:*:*:*
  • HPE/UCMDB Configuration Managerllm-create
    Range: >=10.0, <=10.21
  • HPE/Universal Discoveryllm-create
    Range: >=10.0, <=10.21
  • HPE/Universal CMDBllm-fuzzy
    Range: >=10.0, <=10.21

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.