Trusted Design

ArcSight ESM and ESM Express, Remote Arbitrary File Download

概要

VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with ArcSight ESM and ESM Express. The vulnerabilities could be exploited remotely to trick an unsuspecting user into downloading arbitrary files, or running arbitrary commands on the local system. References: CVE-2016-1990 CVE-2016-1991 PSRT102039 SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. HP ArcSight ESM Express all versions HP ArcSight ESM 5.x versions prior to 5.6, 6.0, 6.5.x prior to 6.5C SP1 Patch 2, 6.8c

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• HP ArcSight Logger contains multiple vulnerabilities (score: 0.58)
• CVE-2015-0097 Exploited in the Wild (score: 0.53)
• FIREEYE: Office Encapsulated PostScript & Priv Escalation 0days (score: 0.52)
• VENOM: VM Escape (virtual floppy drive 0day) (score: 0.51)
• Killing a Zero-Day in the Egg: Adobe CVE-2016-1019 (score: 0.51)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る