[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fl2hcS7jLKDpdMVTyDCgWoPwxYZZHilVedrdUudrRm2k":3,"g5a-risk:CVE-2016-2004":155},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":96,"weaknesses":97,"weaknessesCount":49,"isActivelyExploited":106,"cisaInfo":15,"otxData":15,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":151,"notableEvents":152},"CVE-2016-2004","What is CVE-2016-2004?","HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.","HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to ...","2016-04-21T11:00:04.743","2025-04-12T10:46:40.837",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,8.6,10,0.94251,[40,40,40,40,40,40,40],"Critical",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"hp","data_protector","*","cpe:2.3:a:hp:data_protector:*:*:*:*:*:*:*:*",1,[51,57,61,66,70,75,79,82,84,86,88,90,92,94],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F137199\u002FHP-Data-Protector-A.09.00-Command-Execution.html","Packetstormsecurity",[55,56],"Third Party Advisory","VDB Entry",{"url":58,"source":53,"tags":59},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F137341\u002FHP-Data-Protector-Encrypted-Communication-Remote-Command-Execution.html",[60,55,56],"Exploit",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F267328","Cert",[55,65],"US Government Resource",{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035631","Securitytracker",[55,56],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05085988","Hpe",[74],"Vendor Advisory",{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39858\u002F","Exploit-db",[60,55,56],{"url":80,"source":77,"tags":81},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39874\u002F",[60,55,56],{"url":52,"source":53,"tags":83},[55,56],{"url":58,"source":53,"tags":85},[60,55,56],{"url":62,"source":63,"tags":87},[55,65],{"url":67,"source":68,"tags":89},[55,56],{"url":71,"source":72,"tags":91},[74],{"url":76,"source":77,"tags":93},[60,55,56],{"url":80,"source":77,"tags":95},[60,55,56],14,[98],{"id":99,"name":100,"description":101,"extendedDescription":102,"status":103,"abstraction":104,"structure":105},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2016-2004? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-2004, a critical severity cyber security vulnerability from 2016. High exploit probability (94.3%). HPE Data Protector bef...","CVE-2016-2004, CVE-2016-2004 vulnerability, CVE-2016-2004 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, hp security, data_protector vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2016-2004",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":10,"dateModified":11,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-2004","Cybersecurity","CVE-2016-2004, CVE-2016-2004 vulnerability, CVE-2016-2004 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134],{"Operator":15,"Negate":15,"Nodes":135},[136],{"Operator":137,"Negate":15,"CPEMatch":138},"OR",[139,143,147],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":141,"VersionEndExcluding":142,"VersionEndIncluding":15},"4289D072-BC71-45FE-B6E1-40D8B890FCCF","7.0","7.03_108",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":145,"VersionEndExcluding":146,"VersionEndIncluding":15},"4D474822-8937-40A5-BEA4-09B2310179D7","8.0","8.15",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":15},"9299DCD9-26A6-4A60-9866-CFA1F2F4668E","9.0","9.06",[],[],{"lastModified":11,"cacheTime":154,"version":33},1792433342746,{"score":156,"band":157,"action":158,"scoredAt":159},79,"High","Patch now","2026-10-19T06:48:08.14072+00:00"]