An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.
[
{
"product": "HP ArcSight ESM",
"vendor": "Micro Focus",
"versions": [
{
"status": "affected",
"version": "Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1"
}
]
},
{
"product": "HP ArcSight ESM Express",
"vendor": "Micro Focus",
"versions": [
{
"status": "affected",
"version": "Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1"
}
]
}
]