CVE-2023-6016: h2o

Critical severity, CVSS 9.8. EPSS: 30.6% chance of exploitation in the next 30 days.

An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.

Affected products

• h2o h2o: affected versions not specified

Published 2023-11-16. Last modified 2026-06-17.