AL
Product
Arcsight Logger
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 6Low 0
Watch
Add Arcsight Logger to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3479 | 9.8 | Mar 25 | Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7 Affected: before 6.7 |
| CVE-2019-11655 | 8.8 | Oct 4 | Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later Affected: 6.7.0 and later |
| CVE-2019-3484 | 7.8 | Mar 25 | Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7 Affected: before 6.7 |
| CVE-2015-6863 | 7.3 | Jan 16 | HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component Affected: through 6.1 |
| CVE-2019-3481 | 7.1 | Mar 25 | Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7 Affected: before 6.7 |
| CVE-2019-3483 | 6.5 | Mar 25 | Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7 Affected: before 6.7 |
| CVE-2019-3482 | 6.5 | Mar 25 | Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7 Affected: before 6.7 |
| CVE-2015-6864 | 6.3 | Jan 16 | HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component Affected: through 6.1 |
| CVE-2019-3485 | 6.1 | Jul 24 | Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1 Affected: before 6.7.1 |
| CVE-2019-3480 | 6.1 | Mar 25 | Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7 Affected: before 6.7 |
| CVE-2019-11656 | 5.4 | Oct 4 | Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0 Affected: before 6.7.1; 6.7.1 |
| CVE-2015-5441 | – | Nov 12 | Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web… Affected: through 6.0 |
| CVE-2015-6030 | – | Nov 4 | HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight… Affected: 6.0.0.7307.1 |
| CVE-2015-6029 | – | Nov 4 | HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force… Affected: 6.0.0.7307.1 |
| CVE-2015-2136 | – | Sep 16 | HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors Affected: through 6.0 |
| CVE-2014-7884 | – | Mar 14 | Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors Affected: 6.0 |
| CVE-2012-5199 | – | Feb 16 | Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via… Affected: through 5.2 |
| CVE-2012-5198 | – | Feb 16 | Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown… Affected: through 5.2 |
| CVE-2012-3286 | – | Feb 16 | Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information,… Affected: through 5.2 |
Showing 19