NetSight
medium5.3

CVE-2017-13991

An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of …

Impact

An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of product license features.

Affected products

VendorProductAffected versions
HpArcsight Enterprise Security Manager
Versions 6.0, 6.0c, 6.5, 6.5c, 6.8, 6.8c
HpArcsight Enterprise Security Manager Express
Versions 6.0, 6.0c, 6.5, 6.5c, 6.8, 6.8c

Weakness classification

References