CVE-2017-14356

CVE-2017-14356: vulnerability in Micro Focus HP ArcSight ESM

Published · Updated

Follow this CVE+ Monitor HP ArcSight ESM+ Monitor HP ArcSight ESM Express

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.
Affected products
Micro Focus · HP ArcSight ESMMicro Focus · HP ArcSight ESM Express
Related CVEs — Micro Focus HP ArcSight ESM

In the same product, most dangerous first.

CVE-2017-14357—CVE-2017-14357EPSS 1.3%CVE-2017-14358—CVE-2017-14358EPSS 1.2%