CVE-2016-1991

Published: Mar 16, 2016Modified: May 6, 2026

8.0

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.

Affected (5)

Products: Microfocus: Arcsight Enterprise Security Manager

Microfocus

1 product

Arcsight Enterprise Security Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microfocus Arcsight Enterprise Security Manager	From 5.0 to 5.6
Microfocus Arcsight Enterprise Security Manager	Version 6.0
Microfocus Arcsight Enterprise Security Manager	Version 6.5
Microfocus Arcsight Enterprise Security Manager	Version 6.8
Microfocus Arcsight Enterprise Security Manager	Version 6.9

References (4)

http://www.securitytracker.com/id/1035282

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452

Source: cve@mitre.org

PatchVendor Advisory

http://www.securitytracker.com/id/1035282

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.