CVE-2016-1992

6.5 mediumEPSS 1.8%

Medium (6.5) in hp. EPSS 1.8% chance of exploitation in the next 30 days.

HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hp:enterprise_security_manager
hp:enterprise_security_manager_express

References

http://www.securitytracker.com/id/1035307
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048753
http://www.securitytracker.com/id/1035307
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048753

Check your stack JSON