CVE-2015-2136

medium

HPE

CVSS v3 Base Score

4.0

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS Score

0.1%

Exploitation probability in 30 days

Top 67% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Published: September 16, 2015 (3894 days ago)

Last Modified: May 6, 2026

Vendor: HPE

Source: NVD

Description

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.

CWE-200

hp arcsight logger