Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAM_TAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Published

2016-07-15T16:59:08.190

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp intelligent_management_center_application_performance_manager ≤ 7.2 Yes
Application hp intelligent_management_center_branch_intelligent_management_system ≤ 7.2 Yes
Application hp intelligent_management_center_endpoint_admission_defense ≤ 7.2 Yes
Application hp intelligent_management_center_network_traffic_analyzer ≤ 7.2 Yes
Application hp intelligent_management_center_platform ≤ 7.2 Yes
Application hp intelligent_management_center_user_access_management ≤ 7.2 Yes
References