Vulnerabilities > HP > Universal Cmbd Foundation > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-06-08 CVE-2016-4368 Improper Input Validation vulnerability in HP products
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
network
low complexity
hp CWE-20
critical
9.8