{"id":"CVE-2016-1991","aliases":["EUVD-2016-3080","GHSA-wqh5-fgx4-grww"],"status":"published","title":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and...","description":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified \"file download\" attacks via unknown vectors.","severity":{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01572,"percentile":0.75566,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-03-16T10:00:00Z","modified":"2026-06-17T00:43:02Z","products":[{"vendor":"microfocus","product":"arcsight_enterprise_security_manager"}],"references":[{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035282","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1991"},{"url":"https://github.com/advisories/GHSA-wqh5-fgx4-grww"}],"sources":{"cve":[{"id":"CVE-2016-1991","description":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified \"file download\" attacks via unknown vectors.","status":"published","published":"2016-03-16T10:00:00Z","modified":"2024-08-05T23:17:50.348Z","updated_at":"2026-11-02T14:33:36.175943Z"}],"euvd":[{"id":"EUVD-2016-3080","description":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified \"file download\" attacks via unknown vectors.","status":"published","published":"2016-03-16T10:00:00Z","modified":"2024-08-05T23:17:50Z","updated_at":"2026-11-03T02:22:54.667958Z"}],"ghsa":[{"id":"GHSA-wqh5-fgx4-grww","title":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and...","description":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified \"file download\" attacks via unknown vectors.","status":"published","published":"2022-05-14T02:20:57Z","modified":"2023-02-02T05:05:26Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:52:07.125195Z"}],"nvd":[{"id":"CVE-2016-1991","description":"HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified \"file download\" attacks via unknown vectors.","status":"published","published":"2016-03-16T10:59:02.12Z","modified":"2026-06-17T00:43:02.683Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:22.479119Z"}]}}