CVE-2016-1986: HP Continuous Delivery Automation

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected products

• HP Continuous Delivery Automation: version 1.3.0 only

Published 2016-02-12. Last modified 2026-06-17.