CVE-2016-4377: HP Converged Infrastructure Solution Sizer Suite

High severity, CVSS 8.1. EPSS: 7.2% chance of exploitation in the next 30 days.

HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered by HANA before 16.11.1, Sizer for ConvergedSystems Virtualization before 16.7.1, Sizer for Microsoft Exchange Server before 16.12.1, Sizer for Microsoft Lync Server 2013 before 16.12.1, Sizer for Microsoft SharePoint 2013 before 16.13.1, Sizer for Microsoft SharePoint 2010 before 16.11.1, and Sizer for Microsoft Skype for Business Server 2015 before 16.5.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• HP Converged Infrastructure Solution Sizer Suite: up to and including 2.13.0
• HP Insight Management Sizer: up to and including 16.12.0
• HP Power Advisor: up to and including 7.8.1
• HP SAP Sizing Tool: up to and including 16.12.0
• HP Sizer For Converged Systems Virtualization: up to and including 16.7.0
• HP Sizer For Microsoft Exchange Server 2010: up to and including 16.12.0
• HP Sizer For Microsoft Exchange Server 2013: up to and including 16.12.0
• HP Sizer For Microsoft Exchange Server 2016: up to and including 16.12.0
• HP Sizer For Microsoft Lync Server 2013: up to and including 16.12.0
• HP Sizer For Microsoft SharePoint 2010: up to and including 16.11.0
• HP Sizer For Microsoft SharePoint 2013: up to and including 16.13.0
• HP Sizer For Microsoft Skype For Business Server 2015: up to and including 16.5.0
• HP Sizing Tool For SAP Business Suite Powered By Hana: up to and including 16.11.0
• HP Storage Sizing Tool: up to and including 13.0
• HP Synergy Planning Tool: up to and including 3.2

Published 2016-08-22. Last modified 2026-06-17.