Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-14356

An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited r

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus HP ArcSight ESM

  • Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1affected

Micro Focus HP ArcSight ESM Express

  • Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1affected

References