CVE-2017-14356 An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL...
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc arcsight enterprise security manager | = 6.0 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.0c | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.5 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.5-sp1 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.5c | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.5c-sp1 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.8 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.8c | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.9.0c | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.9.1c | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.9.1c-p1 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.9.1c-p2 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.9.1c-p3 | No fix listed |
| HP Inc arcsight enterprise security manager | = 6.11.0 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.0 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.0c | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.5 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.5-sp1 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.5c | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.5c-sp1 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.8 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.8c | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.9.0c | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.9.1c | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.9.1c-p1 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc arcsight enterprise security manager express | = 6.9.1c-p2 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.9.1c-p3 | No fix listed |
| HP Inc arcsight enterprise security manager express | = 6.11.0 | No fix listed |
| micro focus HP ArcSight ESM | = Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 | No fix listed |
| micro focus HP ArcSight ESM Express | = Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 | No fix listed |
References
- 101627 vdb-entry
- softwaresupport.hpe.com
- ESB-2017.2737 third-party-advisory