hp arcsight-management-center CVE-2018-6500 in HP and Micro Focus Products
Published on September 20, 2018

MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

product logo product logo
A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.

NVD


Products Associated with CVE-2018-6500

stack.watch emails you whenever new vulnerabilities are published in HP Arcsight Management Center or Micro Focus Arcsight Management Center. Just hit a watch button to start following.

 
 

Affected Versions

Micro Focus ArcSight Management Center Version all versions prior to 2.81 is affected by CVE-2018-6500

Exploit Probability

EPSS
1.50%
Percentile
80.91%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.