CVE-2016-4373

—

CVSS 3.0

9.8 critical

EPSS

4%p91

Published

Aug 1, 2016 (Aug 1, 2016)

Modified

Jun 17, 2026

Description

The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Vendors: hp
Products: operations manager
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news0 stories

No ingested article mentions this CVE yet.