NVD

Id
18304  
Name
CVE-2016-1991  
Description
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-03-16  
Modified Date
2016-12-02  
Seq
2016-1991  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101409 18304 CVE-2016-1991 1035282  View
101410 18304 CVE-2016-1991 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1051 JVNDB-2016-001824 HPE ArcSight ESM および ArcSight ESM Express における不特定の "ファイルダウンロード" 攻撃を実行される脆弱性 HPE ArcSight ESM および ArcSight ESM Express には、不特定の "ファイルダウンロード" 攻撃を実行される脆弱性が存在します。 CVE-2016-1991 88497 CVE-2016-1991 18304 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001824.html 2016-03-14 2016-03-23 View