Unscored severity · published Feb 16, 2013
CVE-2012-5198
Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown…
–
CVSS
3.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Arcsight Connector Appliance · HP
c1400; c3400; c5400 · source: NVD
AC
Arcsight Connector Appliance Firmware · HP
through 6.2.0.6244.0; 6.0.0.60023.2 · source: NVD
AL
Arcsight Logger · HP
through 5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5198
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5198
Vendor Advisory
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700
US Government Resource
http://www.kb.cert.org/vuls/id/988100
More from Arcsight Connector Appliance
–
CVE-2015-6030
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight…
–
CVE-2012-5199
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via…
–
CVE-2012-3286
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information,…
–
CVE-2012-2960
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote…