Hp Arcsight Management Center vulnerabilities

7 vulnerabilities

Known vulnerabilities in Hp Arcsight Management Center, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-6505hparcsight_management_center+1
EPSS score
2.54%
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads.6.8CVE-2018-6503hparcsight_management_center+1
EPSS score
1.14%
A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.6.5CVE-2018-6502hparcsight_management_center+1
EPSS score
1.27%
A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS).7.5CVE-2018-6500hparcsight_management_center+1
EPSS score
4.00%
A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.6.5CVE-2018-6501hparcsight_management_center
EPSS score
0.83%
Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls.7.2CVE-2015-6030hparcsight_command_center+6
EPSS score
0.61%
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.6.1CVE-2019-3486hparcsight_management_center+1
EPSS score
0.97%
Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1