CVE-2016-1991

EPSS 0.48%
Published 16.03.2016 10:59:02
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Microfocus ≫ Arcsight Enterprise Security Manager Version >= 5.0 <= 5.6

Microfocus ≫ Arcsight Enterprise Security Manager Version6.0

Microfocus ≫ Arcsight Enterprise Security Manager Version6.5

Microfocus ≫ Arcsight Enterprise Security Manager Version6.8

Microfocus ≫ Arcsight Enterprise Security Manager Version6.9 SwEditionexpress

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.48%	0.642

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8	2.1	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	6	6.8	6.4	AV:N/AC:M/Au:S/C:P/I:P/A:P

http://www.securitytracker.com/id/1035282

Third Party Advisory

VDB Entry

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1991

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1991

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1991

EUVD