Arcsight Enterprise Security Manager

arcsight_enterprise_security_manager

Vendor: Microfocus • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38127 1Microfocus 1Arcsight Enterprise Security Manager Jun 17, 2026 Jan 14, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (X...Show more Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).Show less
CVE-2021-38126 1Microfocus 1Arcsight Enterprise Security Manager Jun 17, 2026 Jan 14, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (X...Show more Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).Show less
CVE-2021-38124 1Microfocus 1Arcsight Enterprise Security Manager Jun 17, 2026 Sep 28, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.
CVE-2016-1991 1Microfocus 1Arcsight Enterprise Security Manager May 6, 2026 Mar 16, 2016 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown...Show more HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.Show less
CVE-2016-1990 1Microfocus 1Arcsight Enterprise Security Manager May 6, 2026 Mar 16, 2016 N/A· v4 7.8 HIGH· v3 4.3 MEDIUM· v2 HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.
CVE-2015-6030 2Hp Microfocus 7Arcsight Command Center Arcsight Connector ApplianceArcsight Connectors+4 more May 6, 2026 Nov 4, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain...Show more HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.Show less
CVE-2014-7885 1Microfocus 1Arcsight Enterprise Security Manager May 6, 2026 Mar 14, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.
CVE-2013-4815 1Microfocus 1Arcsight Enterprise Security Manager Apr 29, 2026 Sep 20, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.