Description (CNA)
An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Micro Focus / HP ArcSight ESM | affected Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 |
| Micro Focus / HP ArcSight ESM Express | affected Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 |
CWE
No CWE identifiers supplied.
References
- https://softwaresupport.hpe.com/km/KM02996760
- https://www.auscert.org.au/bulletins/54166
- http://www.securityfocus.com/bid/101627
ADP enrichment
No English description supplied.