CVE-2016-1990

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2016-03-16

Last modified

2024-08-05

Weaknesses

CWE-264

Affected products

• Arcsight Enterprise Security Manager (Microfocus)

References

• http://www.securitytracker.com/id/1035282
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452