CVE-2016-4385

HIGH · CVSS 7.3 EPSS 4.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-09-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-4385

Severity

HIGH

CVSS

7.3

EPSS

4.36%

Apache Java

Original Filing — NVD Description

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.