CVE-2016-4391

A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0...

CVE-2016-1992

HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-1990

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors...

HP ArcSight ESM and ESM Express Arbitrary File Download Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software from Hewlett-Packard HP that combine event correlation and security analysis capabilities. The software collects, correlates and reports on enterprise-wide security events in real time so...

HP ArcSight SmartConnector CWSAPI SOAP Service Using Hardcoded Passwords Vulnerability

HP ArcSight SmartConnector is a log collector product from Hewlett-Packard HP, USA. A security vulnerability exists in the HP ArcSight SmartConnector's CWSAPI SOAP service that stems from the program's use of hard-coded passwords. An attacker could exploit the vulnerability to obtain administrato...

Elevation of Privilege Vulnerability in Multiple HP ArcSight Products

HP ArcSight Logger, ArcSight Command Center, and ArcSight Connector are products of Hewlett-Packard HP, U.S.A. HP ArcSight Logger is a suite of log management software tools; ArcSight Command Center is a command-line center product for monitoring data; and ArcSight Connector is a connector produc...