Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-7884. PoCs published by Horoszkiewicz Julian ISP_.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in ArcSight Logger, allowing authenticated users to upload a JSP web shell to the document root via path traversal. The PoC includes two HTTP requests to create a subdirectory and upload the shell, enabling remote command execution.
Description
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in ArcSight Logger, allowing authenticated users to upload a JSP web shell to the document root via path traversal. The PoC includes two HTTP requests to create a subdirectory and upload the shell, enabling remote command execution.