CVE-2016-1990

Published: Mar 16, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.

Affected (5)

Products: Microfocus: Arcsight Enterprise Security Manager

Microfocus

1 product

Arcsight Enterprise Security Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microfocus Arcsight Enterprise Security Manager	Up to 5.6
Microfocus Arcsight Enterprise Security Manager	Version 6.0
Microfocus Arcsight Enterprise Security Manager	Version 6.5
Microfocus Arcsight Enterprise Security Manager	Version 6.8
Microfocus Arcsight Enterprise Security Manager	Version 6.9

Related CWEs

CWE-264

References (4)

http://www.securitytracker.com/id/1035282

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452

Source: cve@mitre.org

PatchVendor Advisory

http://www.securitytracker.com/id/1035282

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.