Approved changes feed: RSS · Atom

cpe:2.3:a:hp:arcsight_management_center:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductArcsight Management Center (1cad780f-91f7-52cb-afd4-a176d6d5e33c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3486 vulnerable 2026-06-08 05:13:55.008558 ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1
MEDIUM (4.6)
Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1
Published: 2019-07-25T14:30:16.486Z
Updated: 2024-09-16T22:35:08.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6505 vulnerable 2026-06-08 05:11:53.889624 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
HIGH (7.5)
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads.
Published: 2018-09-20T19:00:00.000Z
Updated: 2024-09-17T03:59:35.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6503 vulnerable 2026-06-08 05:11:53.887091 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
MEDIUM (6.5)
A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.
Published: 2018-09-20T19:00:00.000Z
Updated: 2024-09-17T02:06:45.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6502 vulnerable 2026-06-08 05:11:53.886754 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
MEDIUM (6.5)
A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS).
Published: 2018-09-20T19:00:00.000Z
Updated: 2024-09-17T04:19:28.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6501 vulnerable 2026-06-08 05:11:53.886405 Details available
Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls.
Published: 2018-09-20T16:00:00.000Z
Updated: 2024-08-05T06:10:10.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6500 vulnerable 2026-06-08 05:11:53.886012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.