CVE-2016-1997

Опубликовано: 22 мар. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Ссылки

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545
Patch
Vendor Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:operations_orchestration:10.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.01:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.02:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.10:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.20:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.21:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.22:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.22.1:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration:10.50:*:*:*:*:*:*:*

cpe:2.3:a:hp:operations_orchestration_content:*:*:*:*:*:*:*:*

Версия до 1.5.3 (включая)

EPSS

Процентиль: 85%

0.02585

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-8hfx-m4wg-mcm3