Unspecified File Download Vulnerability in HPE ArcSight ESM

CVE-2016-1991 · MEDIUM Severity

AV:N/AC:M/AU:S/C:P/I:P/A:P

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.

Learn more about our User Device Pen Test.