HP ArcSight ESM < 6.8c Information Disclosure

According to its self-reported version number, the version of HP ArcSight Enterprise Security Manager ESM installed on the remote host is prior to 6.8.0.1896 6.8c. It is, therefore, affected by an unspecified flaw that allows an authenticated, remote attacker to disclose sensitive information. C...

CVE-2016-1992

HP ArcSight ESM prior to 6.8c and ArcSight ESM Express prior to 6.9.1 contain an information-disclosure vulnerability that allows remote authenticated users to obtain sensitive data via unspecified vectors. The available sources confirm the affected products and versions and describe an authentic...