Hp Arcsight Logger — known CVE vulnerabilities

Every CVE whose affected-product data names Hp Arcsight Logger, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2019-3479 — CVSS 9.8 (critical): Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
• CVE-2014-7884 — CVSS 9.0 (critical): Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.
• CVE-2019-11655 — CVSS 8.8 (high): Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted…
• CVE-2019-3484 — CVSS 7.8 (high): Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.
• CVE-2015-6863 — CVSS 7.3 (high): HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2)…
• CVE-2015-6030 — CVSS 7.2 (high): HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account…
• CVE-2019-3481 — CVSS 7.1 (high): Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.
• CVE-2012-5199 — CVSS 6.8 (medium): Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote…
• CVE-2019-3482 — CVSS 6.5 (medium): Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.
• CVE-2012-3286 — CVSS 6.5 (medium): Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote…
• CVE-2019-3483 — CVSS 6.5 (medium): Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.
• CVE-2015-6864 — CVSS 6.3 (medium): HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or…
• CVE-2019-3480 — CVSS 6.1 (medium): Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.
• CVE-2019-11656 — CVSS 5.4 (medium): Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability…
• CVE-2012-5198 — CVSS 5.0 (medium): Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to…
• CVE-2015-6029 — CVSS 5.0 (medium): HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers…
• CVE-2019-3485 — CVSS 4.6 (medium): Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1
• CVE-2015-5441 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote…
• CVE-2015-2136 — CVSS 4.0 (medium): HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.