CVE-2016-2009: HP Network Node Manager I

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected products

• HP Network Node Manager I: version 9.20 only; version 9.23 only; version 9.24 only; version 9.25 only; version 10.00 only; version 10.01 only

Published 2016-05-07. Last modified 2026-06-17.