Design/Logic Flaw

HPE Project and Portfolio Management Center PPM 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors...

CVE-2016-1998

CVE-2016-1998 affects HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2. The vulnerability arises from deserializing a crafted Java object, related to the Apache Commons Collections library, allowing remote attackers to execute arbitrary commands. Exposure is via network (remot...