Arcsight Enterprise Security Manager vulnerabilities

Product

Arcsight Enterprise Security Manager

by HP · last CVE Oct 31, 2017

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 1High 1Medium 7Low 0

Severity

All severities9 Critical1 High1 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Arcsight Enterprise Security Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-13988	6.5	1%	Sep 30	An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter… Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more
CVE-2017-13987	6.5	1%	Sep 30	An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to… Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more
CVE-2017-14358	6.1	1%	Oct 31	A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more
CVE-2017-14357	6.1	1%	Oct 31	A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more
CVE-2017-13986	6.1	1%	Sep 30	A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended… Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more
CVE-2017-13991	5.3	1%	Sep 30	An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of product license… Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more
CVE-2017-13990	5.3	1%	Sep 30	An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of Apache Tomcat… Affected: 6.0; 6.0c; 6.5; 6.5; 6.5c; 6.5c; +8 more