HP ArcSight Enterprise Security Manager Unspecified Multiple Remote Security Vulnerabilities

Bugtraq ID:	73073
Class:	Unknown
CVE:	CVE-2014-7885
Remote:	Yes
Local:	No
Published:	Mar 11 2015 12:00AM
Updated:	Mar 11 2015 12:00AM
Credit:	Julian Horoszkiewicz
Vulnerable:	HP ArcSight Enterprise Security Manager 6.0 HP ArcSight Enterprise Security Manager 5.5 HP ArcSight Enterprise Security Manager 5.4 HP ArcSight Enterprise Security Manager 5.3 HP ArcSight Enterprise Security Manager 5.2 HP ArcSight Enterprise Security Manager 5.1 HP ArcSight Enterprise Security Manager 5.0
Not Vulnerable:	HP ArcSight Enterprise Security Manager 6.8c HP ArcSight Enterprise Security Manager 6.5c SP1 P1

HP ArcSight Enterprise Security Manager Unspecified Multiple Remote Security Vulnerabilities

HP ArcSight Enterprise Security Manager is prone to multiple unspecified security vulnerabilities.

Limited information is currently available regarding these issues. We will update this BID as more information emerges.

Versions prior to HP ArcSight Enterprise Security Manager v6.8c are vulnerable.

HP ArcSight Enterprise Security Manager Unspecified Multiple Remote Security Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP ArcSight Enterprise Security Manager Unspecified Multiple Remote Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP ArcSight Enterprise Security Manager Unspecified Multiple Remote Security Vulnerabilities

References:

• HP ArcSight ESM Homepage (HP)
  
• HP Homepage (HP)
  
• HPSBGN03249 rev.1 - HP ArcSight Enterprise Security Manager and Logger, Multiple (HP)