Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hp arcsight management center vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-6030
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Hp Arcsight Connector Appliance
Hp Arcsight Logger 6.0.0.7307.1
Hp Arcsight Command Center 6.8.0.1896.0
Microfocus Arcsight Enterprise Security Manager
Hp Arcsight Express 4.0
Hp Arcsight Management Center
Hp Arcsight Connectors
7.5
CVSSv3
CVE-2018-6500
A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions before 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.
Hp Arcsight Management Center
6.5
CVSSv3
CVE-2018-6501
Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions before 2.81. This vulnerability could be exploited to allow for insufficient access controls.
Hp Arcsight Management Center
6.1
CVSSv3
CVE-2018-6502
A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions before 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS).
Hp Arcsight Management Center
6.5
CVSSv3
CVE-2018-6503
A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions before 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.
Hp Arcsight Management Center
7.5
CVSSv3
CVE-2018-6505
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions before 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads.
Hp Arcsight Management Center
6.1
CVSSv3
CVE-2019-3486
Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions before 2.9.1
Hp Arcsight Management Center
NA
CVE-2015-5441
Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center prior to 2.1 and ArcSight Logger prior to 6.1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Hp Archsight Management Center
Hp Arcsight Logger
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started