CVEvulnerability

CVE-2016-1991

8.0 HIGH Published 2016-03-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-03-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.0 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P

Description

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.

Affected configurations

• microfocus arcsight enterprise security manager (>= 5.0 <= 5.6) • microfocus arcsight enterprise security manager 6.0 • microfocus arcsight enterprise security manager 6.5 • microfocus arcsight enterprise security manager 6.8 • microfocus arcsight enterprise security manager 6.9

References