CVE-2016-4405

HIGH 8.8CVE-2016-4405 · Published 06/08/2018 · updated 17/06/2026

In short

CVE-2016-4405 is a HIGH (CVSS 8.8) vulnerability affecting business service management (hp).
Chance of exploitation in the next 30 days (EPSS): 4.9%, higher than 92.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
business service management hp	`≥ 9.20, ≤ 9.26`	No fix yet

Description

A remote code execution vulnerability was identified in HP Business Service Management (BSM) using Apache Commons Collection Java Deserialization versions v9.20-v9.26

References

securityfocus.com/bid/94183 · Third Party Advisory
support.hpe.com/hpsc/doc/public/display · Vendor Advisory

More vulnerabilities in business service management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free