CVE-2016-4372

🗓️ 15 Jul 2016 16:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Vulnerability allows remote execution of commands via crafted Java object in HPE iMC versions.

Reporter	Title	Published	Views	Family All 10
0day.today	HPE < 7.2 - Java Deserialization Exploit	19 Sep 201700:00	–	zdt
Circl	CVE-2016-4372	6 Jan 202422:32	–	circl
CNVD	HPE IMC ACC Remote Code Execution Vulnerability	17 Jul 201600:00	–	cnvd
Cvelist	CVE-2016-4372	15 Jul 201616:00	–	cvelist
Tenable Nessus	H3C / HPE Intelligent Management Center Java Object Deserialization RCE	23 Aug 201600:00	–	nessus
Tenable Nessus	HP Intelligent Management Center Java Object Deserialization RCE	24 Aug 201600:00	–	nessus
Imperva Blog	Deserialization Attacks Surge Motivated by Illegal Crypto-mining	24 Jan 201817:45	–	impervablog
NVD	CVE-2016-4372	15 Jul 201616:59	–	nvd
OSV	CVE-2016-4372	15 Jul 201616:59	–	osv
Prion	Design/Logic Flaw	15 Jul 201616:59	–	prion

NVD

Node

Source	Link
securityfocus	www.securityfocus.com/bid/91739
exploit-db	www.exploit-db.com/exploits/42756/
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay

Parameter	Position	Path	Description	CWE
payload	request body	imc/topo/WebDMServlet	Java deserialization via WebDMServlet leading to remote code execution using crafted Java object (CommonsCollections) via serialized payload	CWE-20

17 Jun 2026 00:47Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 39.8

EPSS0.19442