| Package | Affected versions | Patched versions |
|---|---|---|
| universal cmbd configuration manager | = 10.0= 10.01= 10.10= 10.11= 10.20= 10.21 | |
| universal cmbd foundation | = 10.0= 10.01= 10.10= 10.11= 10.20= 10.21 | |
| universal discovery | = 10.0= 10.01= 10.10= 10.11= 10.20= 10.21 |
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free