Vulnerabilities

TI-2019-08725 CVE-2019-11656 · GHSA-w92w-c9qq-339w

Cross-site scripting in ArcSight Logger.

LOW 25

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00644 Published 2019-10-04 No fix listed CWE-79

TI-2019-08724 CVE-2019-11655 · GHSA-xqcw-gm88-2753

Unrestricted file upload in ArcSight Logger.

MEDIUM 41

Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01513 Published 2019-10-04 No fix listed CWE-434

TI-2019-02606 CVE-2019-3485 · GHSA-jx5j-hhv2-5v49

ArcSight Logger stored cross site script issue in version prior to 6.7.1

LOW 30

Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01145 Published 2019-07-24 Fixed in 6.7.1 CWE-79

TI-2019-02605 CVE-2019-3484 · GHSA-wjph-cpr8-chcv

Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.

LOW 37

Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01374 Published 2019-03-25 Fixed in 6.7

TI-2019-02604 CVE-2019-3483 · GHSA-2pvm-v53r-33rw

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.

LOW 32

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01528 Published 2019-03-25 Fixed in 6.7

TI-2019-02603 CVE-2019-3482 · GHSA-8gvw-wr6f-gppp

Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.

LOW 36

Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0415 Published 2019-03-25 Fixed in 6.7 CWE-22

TI-2019-02602 CVE-2019-3481 · GHSA-xc72-7fjv-v78h

Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.

LOW 35

Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01705 Published 2019-03-25 Fixed in 6.7 CWE-611

TI-2019-02601 CVE-2019-3480 · GHSA-65mp-9f45-j7c5

Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.

LOW 30

Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01266 Published 2019-03-25 Fixed in 6.7 CWE-79

TI-2019-02600 CVE-2019-3479 · GHSA-9cmf-ch3x-4cjx

Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.

MEDIUM 52

Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06924 Published 2019-03-25 Fixed in 6.7

TI-2015-05760 CVE-2015-6864 · GHSA-mr3c-q42v-gx9p

HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary…

LOW 30

HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00854 Published 2016-01-16 No fix listed CWE-20

TI-2015-05759 CVE-2015-6863 · GHSA-hwg3-34cw-8x3q

HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via…

LOW 36

HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.02264 Published 2016-01-16 No fix listed CWE-20

TI-2015-04577 CVE-2015-5441 · GHSA-jw4h-2vhw-8fwh

Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01942 Published 2015-11-12 No fix listed CWE-79

TI-2015-05099 CVE-2015-6030 · GHSA-8jfh-c5c9-f6fm

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight…

LOW 33

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00608 Published 2015-11-04 No fix listed CWE-264

TI-2015-05098 CVE-2015-6029 · GHSA-h4fg-w6hc-gj2p

HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP…

LOW 30

HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04439 Published 2015-11-04 No fix listed CWE-254

TI-2015-01913 CVE-2015-2136 · GHSA-mf2h-rjh2-5cjx

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended…

LOW 23

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0184 Published 2015-09-16 No fix listed CWE-200

TI-2014-06552 CVE-2014-7884 · GHSA-84mx-xm3r-9978

Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown…

MEDIUM 52

Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.117 Published 2015-03-14 No fix listed

TI-2012-04385 CVE-2012-5199 · GHSA-54v5-rq84-h3gv

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight…

LOW 32

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors.

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.00942 Published 2013-02-16 No fix listed

TI-2012-04384 CVE-2012-5198 · GHSA-8vwj-828x-xgqg

Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight…

LOW 29

Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03792 Published 2013-02-16 No fix listed

TI-2012-02830 CVE-2012-3286 · GHSA-274w-2mj6-9594

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight…

LOW 33

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of servic…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02374 Published 2013-02-16 No fix listed

Vulnerabilities

Filters