What’s Vulnerable › Vulnerabilities

CVE-2016-1997

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-03-22 · updated 2026-06-17
• Weakness: CWE-20

Description

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

• Micro Focus HPE Operations Orchestration: 10.0, 10.01, 10.02, 10.10, 10.20, 10.21 (+3)
• HP Operations Orchestration Content: through 1.5.3

References

• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545

Get alerted when CVE-2016-1997 or the next vulnerability affects your stack