VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 8, 2016· Updated Jun 17, 2026

CVE-2016-4369

CVE-2016-4369

Description

HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

4
  • Microfocus/Discovery And Dependency Mapping Inventory3 versions
    cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.30:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.30:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.31:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.32:*:*:*:*:*:*:*
  • HPE/Discovery and Dependency Mapping Inventoryllm-create
    Range: = 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, 9.32 update 3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.