10.22

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-10	CVE-2017-8994	Improper Input Validation vulnerability in HP Operations Orchestration A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. network low complexity hp CWE-20 critical	9.8
2016-03-22	CVE-2016-1997	Improper Input Validation vulnerability in HP products HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. network low complexity hp CWE-20 critical	9.8