HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers t

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• hp arcsight logger6.0.0.7307.1

Other highest-scoring records for the same primary product.

• CVE-2019-3479Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
  41Plan
• CVE-2014-7884Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.
  40Plan
• CVE-2019-11655Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later.
  35Monitor
• CVE-2019-3484Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.
  31Monitor
• CVE-2015-6863HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client
  30Monitor
• CVE-2019-3481Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.
  29Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.