CVE-2016-4385

—

CVSS 3.0

7.3 high

EPSS

4%p91

Published

Sep 29, 2016 (Sep 29, 2016)

Modified

Jun 17, 2026

Description

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.

Vendors: hp
Products: network automation
Weakness: CWE-502
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news0 stories

No ingested article mentions this CVE yet.