CVE-2016-1991

8.0 highEPSS 1.6%

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
Published: 2016-03-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:arcsight_enterprise_security_manager

References

http://www.securitytracker.com/id/1035282
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452
http://www.securitytracker.com/id/1035282
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452

Check your stack JSON