Search Results (10 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2015-6030 2 Hp, Microfocus 7 Arcsight Command Center, Arcsight Connector Appliance, Arcsight Connectors and 4 more 2025-04-12 N/A
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
CVE-2023-24470 1 Microfocus 1 Arcsight Logger 2025-01-06 9.1 Critical
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
CVE-2023-24469 1 Microfocus 1 Arcsight Logger 2025-01-03 6.1 Medium
Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
CVE-2022-26331 1 Microfocus 1 Arcsight Logger 2024-11-21 6.1 Medium
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.
CVE-2022-26330 1 Microfocus 1 Arcsight Logger 2024-11-21 6.5 Medium
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.
CVE-2020-25834 1 Microfocus 1 Arcsight Logger 2024-11-21 5.4 Medium
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).
CVE-2020-11860 1 Microfocus 1 Arcsight Logger 2024-11-21 6.1 Medium
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)
CVE-2020-11851 1 Microfocus 1 Arcsight Logger 2024-11-21 9.8 Critical
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.
CVE-2020-11839 1 Microfocus 1 Arcsight Logger 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
CVE-2019-11657 1 Microfocus 1 Arcsight Logger 2024-11-21 8.8 High
Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack.