CVE-2016-1990 in ArcSight ESM

Sumário

de MITRE

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c, and ArcSight ESM Express, allows local users to gain privileges for command execution via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 22/01/2016
• Divulgação: 16/03/2016
• Moderação: aceite
• Entrada: VDB-81374
• CPE: pronto
• CWE: CWE-264 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00099
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1990
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1990
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1990/