6.5
CVSSv3

CVE-2017-13987

Published: 30/09/2017 Updated: 07/11/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version before 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files.

Vulnerable Product Search on Vulmon Subscribe to Product

hp arcsight enterprise security manager 6.8

hp arcsight enterprise security manager 6.5

hp arcsight enterprise security manager 6.0

hp arcsight enterprise security manager 6.11.0

hp arcsight enterprise security manager 6.0c

hp arcsight enterprise security manager 6.5c

hp arcsight enterprise security manager 6.8c

hp arcsight enterprise security manager 6.9.0c

hp arcsight enterprise security manager 6.9.1c

hp arcsight enterprise security manager express 6.11.0

hp arcsight enterprise security manager express 6.8

hp arcsight enterprise security manager express 6.8c

hp arcsight enterprise security manager express 6.5c

hp arcsight enterprise security manager express 6.5

hp arcsight enterprise security manager express 6.0c

hp arcsight enterprise security manager express 6.0

hp arcsight enterprise security manager express 6.9.1c

hp arcsight enterprise security manager express 6.9.0