1. Home
  2. CVE Database
  3. CVE-2018-6504
HIGH · 8.8

CVE-2018-6504

A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for ...

Vulnerability Description

A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MicrofocusArcsight Management Center< 2.81

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2018-6504?

CVE-2018-6504 is a vulnerability with a CVSS score of 8.8 (HIGH). A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for ...

How severe is CVE-2018-6504?

CVE-2018-6504 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-6504?

Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Arcsight Management Center.