NVD

Id
20049  
Name
CVE-2016-4372  
Description
HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAM_TAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-07-15  
Modified Date
2016-11-28  
Seq
2016-4372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109421 20049 CVE-2016-4372 91739  View
109422 20049 CVE-2016-4372 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05200601  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3019 JVNDB-2016-003792 複数の HPE IMC 製品における任意のコマンドを実行される脆弱性 複数の HPE IMC 製品には、Apache Commons Collections (ACC) ライブラリに関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-4372 90878 CVE-2016-4372 20049 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003792.html 2016-07-11 2016-07-25 View