CVE-2016-1997

—

CVSS 3.0

9.8 critical

EPSS

7%p93

Published

Mar 22, 2016 (Mar 22, 2016)

Modified

Jun 17, 2026

Description

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Vendors: hp
Products: operations orchestration, operations orchestration content
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.7%)

In the news0 stories

No ingested article mentions this CVE yet.