HP Arcsight Enterprise Security Manager
9 CVEs affecting HP Arcsight Enterprise Security Manager. Latest disclosed: 2017-10-31. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14356 | Critical | 9.8 | 2017-10-31 | An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability… |
CVE-2017-13989 | High | 8.1 | 2017-09-30 | An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthoriz… |
CVE-2017-13988 | Medium | 6.5 | 2017-09-30 | An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthoriz… |
CVE-2017-13987 | Medium | 6.5 | 2017-09-30 | An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an una… |
CVE-2017-14358 | Medium | 6.1 | 2017-10-31 | A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1… |
CVE-2017-14357 | Medium | 6.1 | 2017-10-31 | A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6… |
CVE-2017-13986 | Medium | 6.1 | 2017-09-30 | A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows… |
CVE-2017-13991 | Medium | 5.3 | 2017-09-30 | An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of… |
CVE-2017-13990 | Medium | 5.3 | 2017-09-30 | An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of… |