Medium severity6.3NVD Advisory· Published Jan 16, 2016· Updated May 6, 2026

CVE-2015-6864

Description

HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.

Affected products

HP/Arcsight Logger
cpe:2.3:a:hp:arcsight_logger:*:*:*:*:*:*:*:*
Range: <=6.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000