VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 31, 2017· Updated May 13, 2026

CVE-2017-14356

CVE-2017-14356

Description

An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.

Affected products

2
  • Micro Focus/HP ArcSight ESMv5
    Range: Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1
  • Micro Focus/HP ArcSight ESM Expressv5
    Range: Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.