CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.0. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2016-1991
Severity
HIGH
CVSS
8
EPSS
1.57%
Original NVD Description
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors.