How severe is CVE-2014-7885?

CVE-2014-7885 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2014-7885 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (86th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-7885?

CVE-2014-7885 affects Microfocus Arcsight Enterprise Security Manager. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2014-7885?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2014-7885 published?

CVE-2014-7885 was published on 2015-03-14 and last updated on 2026-06-17.

CVE-2014-7885

CVE-2014-7885 is a critical-severity vulnerability in Microfocus Arcsight Enterprise Security Manager with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 3% (86th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microfocus Arcsight Enterprise Security Manager
Published: 2015-03-14
Last modified: 2026-06-17

Description

Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.

Frequently asked questions

What is CVE-2014-7885?: Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.
How severe is CVE-2014-7885?: CVE-2014-7885 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2014-7885 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (86th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-7885?: CVE-2014-7885 affects Microfocus Arcsight Enterprise Security Manager. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2014-7885?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2014-7885 published?: CVE-2014-7885 was published on 2015-03-14 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:microfocus:arcsight_enterprise_security_manager:*:*:*:*:*:*:*:*

More vulnerabilities in Microfocus Arcsight Enterprise Security Manager

CVE-2021-38124 — Critical (CVSS 9.8): Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting…
CVE-2016-1991 — High (CVSS 8.0): HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express…
CVE-2016-1990 — High (CVSS 7.8): HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express…
CVE-2015-6030 — High (CVSS 7.2): HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3…
CVE-2021-38127 — Medium (CVSS 6.1): Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions…
CVE-2021-38126 — Medium (CVSS 6.1): Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions…

All CVEs affecting Microfocus Arcsight Enterprise Security Manager →