Описание
HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:hp:service_manager:9.30:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.31:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.32:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.33:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.34:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.35:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.40:*:*:*:*:*:*:*
cpe:2.3:a:hp:service_manager:9.41:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01668
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
EPSS
Процентиль: 82%
0.01668
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-20