AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-2003

CRITICAL · CVSS 9.8 EPSS 4.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-04-20 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache, Java. It may be remotely exploitable.

CVE
CVE-2016-2003
Severity
CRITICAL
CVSS
9.8
EPSS
4.46%
Apache Java

Original NVD Description

HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.