CVE-2016-2006: HP Data Protector

Critical severity, CVSS 9.8. EPSS: 20.4% chance of exploitation in the next 30 days.

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.

Affected products

• HP Data Protector: from 7.0, before 7.03_108 (fixed in 7.03_108); from 8.0, before 8.15 (fixed in 8.15); from 9.0, before 9.06 (fixed in 9.06)

Published 2016-04-21. Last modified 2026-06-17.