CVE-2015-6029: HP Arcsight Logger

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.

Affected products

• HP Arcsight Logger: version 6.0.0.7307.1 only

Published 2015-11-04. Last modified 2026-06-17.