CVE-2016-1991

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.

Score

CVSS 3.0 8.0 High

Status

Modified - cve@mitre.org

Published

2016-03-16

Last modified

2024-08-05

Affected products

• Arcsight Enterprise Security Manager (Microfocus)

References

• http://www.securitytracker.com/id/1035282
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452