CVE-2014-7885
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: hp-security-alert@hp.com — https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04562193
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| microfocus | arcsight_enterprise_security_manager | {"endIncluding":"6.5c"} | |
References
- http://www.kb.cert.org/vuls/id/868948
- http://www.securitytracker.com/id/1031921
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04562193
- http://www.kb.cert.org/vuls/id/868948
- http://www.securitytracker.com/id/1031921
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04562193
Verify integrity in audit chain (admin only). AS-IS.