CVE-2015-2903: The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes i...

Security readout for executives and security teams

HP ArcSight SmartConnectors before 7.1.6 reportedly include a hardcoded password in the CWSAPI SOAP service. If that service is reachable, someone who knows the password could gain administrative access. No source in the bundle confirms active exploitation, and CVSS details are not provided. Exposure is most likely in environments running HP ArcSight SmartConnectors before 7.1.6 with CWSAPI SOAP reachable from untrusted or broad internal networks. Public affected-product metadata is incomplete, so asset validation matters. Prioritize remediation for any reachable pre-7.1.6 SmartConnector because administrative compromise of security logging infrastructure can undermine detection, monitoring, and incident response confidence. Mitigation focus: Upgrade HP ArcSight SmartConnectors to 7.1.6 or later per vendor guidance.; Restrict CWSAPI SOAP access to trusted management networks only.; If vendor-supported, disable CWSAPI SOAP where it is not required..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.