GCVE-110-CERTCC-2015-350508

Advisory PublishedCVSS 7.1/10

Vulnetix · Advisory published October 19, 2015

The HP ArcSight SmartConnector fails to properly validate SSL certificates, and also contains a hard-coded password.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.1/10

High · AV:A/AC:L/Au:S/C:C/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score6.1remediation_levelUreport_confidenceURenvironmental_score4.584053100312target_distributionMenvironmental_vectorCDP:N/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-2902 CVE-2015-2903

References

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

advisory

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

url

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

url

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

url

Browse GCVE Records

73,873 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON