# CVEs published 2016-03-22

4 CVEs were published on March 22, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1997](https://cve.now/CVE-2016-1997.md): HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2016-1998](https://cve.now/CVE-2016-1998.md): HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted ser (no CVSS)
- [CVE-2016-3115](https://cve.now/CVE-2016-3115.md): Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended she (CVSS 6.4)
- [CVE-2016-3116](https://cve.now/CVE-2016-3116.md): CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.