HP Arcsight Management Center vulnerabilities

7 CVEs affecting HP Arcsight Management Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3486, published 2019-07-25.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6500, published 2018-09-20. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow…
• CVE-2018-6505, published 2018-09-20. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for…
• CVE-2018-6502, published 2018-09-20. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited…
• CVE-2018-6503, published 2018-09-20. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access…
• CVE-2019-3486, published 2019-07-25. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1
• CVE-2018-6501, published 2018-09-20. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow…
• CVE-2015-6030, published 2015-11-04. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might…