Hp Arcsight Smartconnectors — known CVE vulnerabilities

Every CVE whose affected-product data names Hp Arcsight Smartconnectors, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-2903 — CVSS 6.9 (medium): The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to…
• CVE-2015-2902 — CVSS 6.8 (medium): HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-middle attackers to…