What is CVE-2018-6500?

CVE-2018-6500 is a high-severity vulnerability in HP Arcsight Management Center, classified under Path Traversal. CVSS score: 7.5/10. Published 2018-09-20.

How severe is CVE-2018-6500?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in HP Arcsight Management Center

CVE-2018-6500

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hp Arcsight_management_center
Micro Focus Arcsight Management Center — versions all versions prior to 2.81

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2018-6500?: CVE-2018-6500 is a high-severity vulnerability in HP Arcsight Management Center, classified under Path Traversal. CVSS score: 7.5/10. Published 2018-09-20.
How severe is CVE-2018-6500?: High severity. CVSS v3 base score is 7.5 out of 10.