Arcsight Enterprise Security Manager Express

arcsight_enterprise_security_manager_express

Vendor: Hp • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-14358 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Oct 31, 2017 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL...Show more A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site.Show less
CVE-2017-14357 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Oct 31, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely...Show more A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)Show less
CVE-2017-14356 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Oct 31, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.
CVE-2017-13991 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Sep 30, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of product license features.
CVE-2017-13990 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Sep 30, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of Apache Tomcat application server version.
CVE-2017-13989 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Sep 30, 2017 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to retrieve or modify storage information.
CVE-2017-13988 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Sep 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enab...Show more An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function.Show less
CVE-2017-13987 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Sep 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files.
CVE-2017-13986 1Hp 2Arcsight Enterprise Security Manager Arcsight Enterprise Security Manager Express May 13, 2026 Sep 30, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to th...Show more A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system.Show less