Micro Focus HP Arcsight ESM Express vulnerabilities

3 vulnerabilities

Known vulnerabilities in Micro Focus HP Arcsight ESM Express, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2017-14356hparcsight_enterprise_security_manager+3
EPSS score
1.81%
An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.6.1CVE-2017-14358hparcsight_enterprise_security_manager+3
EPSS score
1.20%
A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site.6.1CVE-2017-14357hparcsight_enterprise_security_manager+3
EPSS score
1.25%
A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)