CVE-2015-2903

MEDIUM 6.9CVE-2015-2903 · Published 04/11/2015 · updated 17/06/2026

In short

CVE-2015-2903 is a MEDIUM (CVSS 6.9) vulnerability affecting arcsight smartconnectors (hp).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
arcsight smartconnectors hp	`≤ 7.1.5`	No fix yet

Description

The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of this password.

References

kb.cert.org/vuls/id/350508 · Third Party Advisory
securitytracker.com/id/1034078
h20564.www2.hpe.com/hpsc/doc/public/display · Vendor Advisory

More vulnerabilities in arcsight smartconnectors

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free