CVE-2016-4369

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-08 · updated 2026-06-17
Weakness: CWE-284

Description

HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

HP Discovery And Dependency Mapping Inventory: 9.30, 9.31, 9.32

References

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05164819
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05164819

Get alerted when CVE-2016-4369 or the next vulnerability affects your stack