Vulnerabilities > HP > Operations Manager > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-08-01 CVE-2016-4373 Improper Access Control vulnerability in HP Operations Manager 9.20.0/9.21/9.21.120
The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
network
low complexity
hp CWE-284
critical
9.8
2016-01-30 CVE-2016-1985 Code Injection vulnerability in HP Operations Manager
HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
network
low complexity
hp CWE-94
critical
10.0