CVE-2016-1990 — Arcsight Enterprise Security Manager vulnerability

CWE-2643 documents3 sources

Severity

7.8HIGHNVD

EPSS

0.1%

top 72.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microfocus Arcsight Enterprise Security Manager

Timeline

PublishedMar 16

Latest updateMay 14

Description

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDmicrofocus/arcsight_enterprise_security_manager5.6+4

Patches

Patch: h20566.www2.hpe.com ↗Patch: h20566.www2.hpe.com ↗

🔴Vulnerability Details

GHSA

GHSA-3qm9-52c7-2c7g: HPE ArcSight ESM 5↗2022-05-14

▶

CVEList

CVE-2016-1990: HPE ArcSight ESM 5↗2016-03-16

▶