Lucene search

MitreCVE-2016-1985

HistoryJan 30, 2016 - 3:59 p.m.

CVE-2016-1985

2016-01-3015:59:09

CWE-94

mitre

web.nvd.nist.gov

cve-2016-1985

nvd

hpe operations manager

remote code execution

windows

apache commons collections

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.007

Percentile

79.6%

JSON

HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected configurations

Nvd

Node

hpoperations_managerMatch8.1

hpoperations_managerMatch8.10

hpoperations_managerMatch8.16

hpoperations_managerMatch9.0

AND

microsoftwindows

VendorProductVersionCPE
hpoperations_manager8.1cpe:2.3:a:hp:operations_manager:8.1:*:*:*:*:*:*:*
hpoperations_manager8.10cpe:2.3:a:hp:operations_manager:8.10:*:*:*:*:*:*:*
hpoperations_manager8.16cpe:2.3:a:hp:operations_manager:8.16:*:*:*:*:*:*:*
hpoperations_manager9.0cpe:2.3:a:hp:operations_manager:9.0:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	operations_manager	8.1	cpe:2.3:a:hp:operations_manager:8.1:::::::*
hp	operations_manager	8.10	cpe:2.3:a:hp:operations_manager:8.10:::::::*
hp	operations_manager	8.16	cpe:2.3:a:hp:operations_manager:8.16:::::::*
hp	operations_manager	9.0	cpe:2.3:a:hp:operations_manager:9.0:::::::*
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::

References

www.securityfocus.com/bid/82259

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953244

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.007

Percentile

79.6%

JSON

Related for CVE-2016-1985