Vulnerability Details CVE-2016-4369
HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.4%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2016-4369
-
cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.30
-
cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.31
-
cpe:2.3:a:hp:discovery_and_dependency_mapping_inventory:9.32