SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2016-4368

CRITICAL · CVSS 9.8 EPSS 4.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-06-08 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache, Java. It may be remotely exploitable.

CVE
CVE-2016-4368
Severity
CRITICAL
CVSS
9.8
EPSS
4.73%
Apache Java

Original NVD Description

HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.