Microfocus Arcsight Enterprise Security Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Microfocus Arcsight Enterprise Security Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2014-7885 — CVSS 10.0 (critical): Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack…
• CVE-2021-38124 — CVSS 9.8 (critical): Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through…
• CVE-2016-1991 — CVSS 8.0 (high): HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows…
• CVE-2016-1990 — CVSS 7.8 (high): HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows…
• CVE-2015-6030 — CVSS 7.2 (high): HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account…
• CVE-2021-38127 — CVSS 6.1 (medium): Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The…
• CVE-2021-38126 — CVSS 6.1 (medium): Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The…
• CVE-2013-4815 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote…