CVE-2016-1989

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-03-15 · updated 2026-06-17

Description

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1988.

Affected products

Hewlett Packard Enterprise Network Automation: 9.22, 9.22.01, 9.22.02, 10.00, 10.00.01

References

http://www.securitytracker.com/id/1035192
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05030906
http://www.securitytracker.com/id/1035192
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05030906

Get alerted when CVE-2016-1989 or the next vulnerability affects your stack