Micro Focus Vulnerabilities and Affected Products
Vulnerabilities associated with HP ArcSight ESM.
Products
Clear product- Service Manager8 vulnerabilities
- Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
- NetIQ Access Manager7 vulnerabilities
- Solutions Business Manager7 vulnerabilities
- ArcSight Management Center6 vulnerabilities
- Solutions Business Manager 11.45 vulnerabilities
- ArcSight Logger4 vulnerabilities
- Solutions Business Manager (SBM)4 vulnerabilities
- Dimensions CM3 vulnerabilities
- Filr3 vulnerabilities
- HP ArcSight ESM3 vulnerabilities
- HP ArcSight ESM Express3 vulnerabilities
- Operation Bridge Manager3 vulnerabilities
- Application Performance Management2 vulnerabilities
- Content Manager2 vulnerabilities
- Data Center Automation Containerized Suite2 vulnerabilities
- Fortify Software Security Center (SSC)2 vulnerabilities
- Hybrid Cloud Management2 vulnerabilities
- Hybrid Cloud Management Containerized Suite2 vulnerabilities
- Micro Focus ArcSight Logger2 vulnerabilities
- Micro Focus NetIQ Self Service Password Reset.2 vulnerabilities
- Micro Focus VisiBroker2 vulnerabilities
- NetIQ eDirectory 9.1 SP22 vulnerabilities
- Network Automation2 vulnerabilities
- Network Operations Management (NOM) Suite CDF2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-14358MEDIUM | A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site. CWE-601Oct 31, 2017 | CVSS6.1v3.0 | EPSS1.2% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-14356CRITICAL | An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection. CWE-89Oct 31, 2017 | CVSS9.8v3.0 | EPSS1.82% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-14357MEDIUM | A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS) CWE-79Oct 31, 2017 | CVSS6.1v3.0 | EPSS1.25% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |