Improper access control

A potential Access Control vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls...

CVE-2018-6502

A potential Reflected Cross-Site Scripting XSS Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting XSS...

CVE-2018-6505

ArcSight Management Center (ArcMC) prior to version 2.81 is affected by an Unauthenticated File Download vulnerability (CVE-2018-6505). The CVE entry and multiple connected sources describe an unauthenticated mechanism that could allow file downloads from ArcMC. The NVD metrics list a CVSSv3 base...

CVE-2018-6502

ArcSight Management Center (ArcMC) is affected by a Reflected Cross-Site Scripting vulnerability in all versions prior to 2.81. The issue, as described in connected CNVD/NVD entries, is a reflected XSS and the advisory suggests upgrading to version 2.81 or later to remediate. Exploit specifics an...

CVE-2018-6504

ArcSight Management Center (ArcMC) is affected by a CSRF vulnerability in all versions prior to 2.81. The CVE-2018-6504 entry is supported by multiple connected sources (CNVD; CVE/CVELIST records) confirming CSRF, with no explicit exploit details or remediation steps provided in the supplied docu...

CVE-2018-6503

Technical details for CVE-2018-6503 are not publicly available in the provided connected documents. Monitor for updates from official sources; current documents only indicate a generic access-control vulnerability in ArcSight Management Center prior to 2.81.

CVE-2018-6500

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal...

CVE-2018-6501

This CVE-2018-6501 affects ArcSight Management Center (ArcMC) prior to version 2.81, with a vulnerability described as Insufficient Access Controls. The connected records confirm the affected product and version range, and that the impact is uncontrolled access due to access-control shortcomings....

CVE-2018-6500 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal...