Design/Logic Flaw

2016-03-1610:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.4%

JSON

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified “file download” attacks via unknown vectors.

CPENameOperatorVersion
arcsight_enterprise_security_managereq6.0
arcsight_enterprise_security_managereq6.5
arcsight_enterprise_security_managereq6.8
arcsight_enterprise_security_managereq6.9
arcsight_enterprise_security_managerge5.0
arcsight_enterprise_security_managerle5.6

Name	Operator	Version
arcsight_enterprise_security_manager	eq	6.0
arcsight_enterprise_security_manager	eq	6.5
arcsight_enterprise_security_manager	eq	6.8
arcsight_enterprise_security_manager	eq	6.9
arcsight_enterprise_security_manager	ge	5.0
arcsight_enterprise_security_manager	le	5.6