HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
| Software | From | Fixed in |
|---|---|---|
| hp / network_node_manager_i | 9.25 | 9.25.x |
| hp / network_node_manager_i | 10.00 | 10.00.x |
| hp / network_node_manager_i | 9.24 | 9.24.x |
| hp / network_node_manager_i | 10.01 | 10.01.x |
| hp / network_node_manager_i | 9.23 | 9.23.x |
| hp / network_node_manager_i | 9.20 | 9.20.x |