Hp Arcsight Enterprise Security Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Hp Arcsight Enterprise Security Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2017-14356 — CVSS 9.8 (critical): An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch…
• CVE-2017-13989 — CVSS 8.1 (high): An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch…
• CVE-2017-13987 — CVSS 6.5 (medium): An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0…
• CVE-2017-13988 — CVSS 6.5 (medium): An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch…
• CVE-2017-13986 — CVSS 6.1 (medium): A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or…
• CVE-2017-14357 — CVSS 6.1 (medium): A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to…
• CVE-2017-14358 — CVSS 6.1 (medium): A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch…
• CVE-2017-13991 — CVSS 5.3 (medium): An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1…
• CVE-2017-13990 — CVSS 5.3 (medium): An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1…