What’s Vulnerable › Vulnerabilities

CVE-2016-8511

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-15 · updated 2026-06-17
• Weakness: CWE-502

Description

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.

Affected products

• Hewlett Packard Enterprise Network Automation: 9.10, 9.20, 9.22, 9.22.01, 9.22.02, 10.00 (+6)

References

• http://www.securityfocus.com/bid/94610
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849
• https://www.tenable.com/security/research/tra-2016-39
• http://www.securityfocus.com/bid/94610
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849
• https://www.tenable.com/security/research/tra-2016-39

Get alerted when CVE-2016-8511 or the next vulnerability affects your stack