Arcsight Logger (Hp) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2019-10-04. Vendor: Hp.

CVEs of Arcsight Logger

• CVE-2019-11656 - CVSS 5.4 (medium), 2019-10-04: Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper…
• CVE-2019-11655 - CVSS 8.8 (high), 2019-10-04: Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File…
• CVE-2019-3485 - CVSS 6.1 (medium), 2019-07-24: Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1
• CVE-2019-3483 - CVSS 6.5 (medium), 2019-03-25: Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.
• CVE-2019-3484 - CVSS 7.8 (high), 2019-03-25: Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.
• CVE-2019-3480 - CVSS 6.1 (medium), 2019-03-25: Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.
• CVE-2019-3479 - CVSS 9.8 (critical), 2019-03-25: Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
• CVE-2019-3482 - CVSS 6.5 (medium), 2019-03-25: Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.
• CVE-2019-3481 - CVSS 7.1 (high), 2019-03-25: Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.
• CVE-2015-6864 - CVSS 6.3 (medium), 2016-01-16: HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2)…
• CVE-2015-6863 - CVSS 7.3 (high), 2016-01-16: HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate…
• CVE-2015-5441 - CVSS 4.3 (medium), 2015-11-12: Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to…
• CVE-2015-6030 - CVSS 7.2 (high), 2015-11-04: HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files…
• CVE-2015-6029 - CVSS 5 (medium), 2015-11-04: HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access…
• CVE-2015-2136 - CVSS 4 (medium), 2015-09-16: HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.
• CVE-2014-7884 - CVSS 9 (critical), 2015-03-14: Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.
• CVE-2012-5199 - CVSS 6.8 (medium), 2013-02-16: Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute…
• CVE-2012-5198 - CVSS 5 (medium), 2013-02-16: Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive…
• CVE-2012-3286 - CVSS 6.5 (medium), 2013-02-16: Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain…