HP Arcsight Logger
19 CVEs affecting HP Arcsight Logger. Latest disclosed: 2019-10-04. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3479 | Critical | 9.8 | 2019-03-25 | Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-11655 | High | 8.8 | 2019-10-04 | Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with… |
CVE-2019-3484 | High | 7.8 | 2019-03-25 | Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7. |
CVE-2015-6863 | High | 7.3 | 2016-01-16 | HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload… |
CVE-2019-3481 | High | 7.1 | 2019-03-25 | Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3483 | Medium | 6.5 | 2019-03-25 | Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3482 | Medium | 6.5 | 2019-03-25 | Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. |
CVE-2015-6864 | Medium | 6.3 | 2016-01-16 | HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certific… |
CVE-2019-3480 | Medium | 6.1 | 2019-03-25 | Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-11656 | Medium | 5.4 | 2019-10-04 | Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Ne… |
CVE-2019-3485 | Medium | 4.6 | 2019-07-24 | Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1 |
CVE-2015-5441 | | 2015-11-12 | Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject… | |
CVE-2015-6030 | | 2015-11-04 | HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owne… | |
CVE-2015-6029 | | 2015-11-04 | HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via… | |
CVE-2015-2136 | | 2015-09-16 | HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors. | |
CVE-2014-7884 | | 2015-03-14 | Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors. | |
CVE-2012-5199 | | 2013-02-16 | Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute a… | |
CVE-2012-5198 | | 2013-02-16 | Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive informa… | |
CVE-2012-3286 | | 2013-02-16 | Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain se… |