HP Arcsight Smartconnectors
2 CVEs affecting HP Arcsight Smartconnectors. Latest disclosed: 2015-11-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-2903 | | 2015-11-04 | The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrati… | |
CVE-2015-2902 | | 2015-11-04 | HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-middle attackers to spoof devices and ob… |