19 results (0.005 seconds)

CVSS: 8.7EPSS: 0%CPEs: 3EXPL: 0

CVE-2024-2835 – OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

https://notcve.org/view.php?id=CVE-2024-2835

20 May 2024 — A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited. Se ha identificado una vulnerabilidad de Cross Site Scripting Almacenado (XSS) en OpenText ArcSight Enterprise Security Manager y ArcSight Platform. La vulnerabilidad podría explotarse de forma remota. • https://portal.microfocus.com/s/article/KM000029773 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.7EPSS: 0%CPEs: 3EXPL: 0

CVE-2024-3482 – OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

https://notcve.org/view.php?id=CVE-2024-3482

20 May 2024 — A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited. Se ha identificado una vulnerabilidad de Cross Site Scripting Almacenado (XSS) en OpenText ArcSight Enterprise Security Manager y ArcSight Platform. La vulnerabilidad podría explotarse de forma remota. • https://portal.microfocus.com/s/article/KM000029773 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-38127

https://notcve.org/view.php?id=CVE-2021-38127

14 Jan 2022 — Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS). Se han identificado posibles vulnerabilidades en Micro Focus ArcSight Enterprise Security Manager, afectando las versiones 7.4.x y 7.5.x. Las vulnerabilidades podrían ser explotadas de forma remota resultando en ataques de tipo Cross-Site Scripting (XSS) • https://portal.microfocus.com/s/article/KM000003453?language=en_US • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-38126

https://notcve.org/view.php?id=CVE-2021-38126

14 Jan 2022 — Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS). Se han identificado posibles vulnerabilidades en Micro Focus ArcSight Enterprise Security Manager, afectando las versiones 7.4.x y 7.5.x. Las vulnerabilidades podrían ser explotadas de forma remota resultando en ataques de tipo Cross-Site Scripting (XSS) • https://portal.microfocus.com/s/article/KM000003453?language=en_US • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 0

CVE-2021-38124

https://notcve.org/view.php?id=CVE-2021-38124

28 Sep 2021 — Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution. Una vulnerabilidad de ejecución de código remota en el producto Micro Focus ArcSight Enterprise Security Manager (ESM), que afecta a las versiones 7.0.2 hasta 7.5. La vulnerabilidad podría ser explotada resultando en una ejecución de código remota • https://portal.microfocus.com/s/article/KM000001960 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 9.8EPSS: 0%CPEs: 28EXPL: 0

CVE-2017-14356

https://notcve.org/view.php?id=CVE-2017-14356

31 Oct 2017 — An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection. Vulnerabilidad de inyección SQL en HP ArcSight ESM y HP ArcSight ESM Express, en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o versión 6.11.0 Patch 1. Esta vulnerabilidad podría explotarse de forma remota para permitir una inyección SQL. • http://www.securityfocus.com/bid/101627 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 6.1EPSS: 0%CPEs: 29EXPL: 0

CVE-2017-14357

https://notcve.org/view.php?id=CVE-2017-14357

31 Oct 2017 — A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS) Vulnerabilidad de Cross-Site Scripting (XSS) persistente y reflejado en HP ArcSight ESM y HP ArcSight ESM Express, en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o versión 6.11.0 Patch 1. Esta vulnerabilidad podría explotarse d... • https://softwaresupport.hpe.com/km/KM02996760 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 28EXPL: 0

CVE-2017-14358

https://notcve.org/view.php?id=CVE-2017-14358

31 Oct 2017 — A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site. Vulnerabilidad de redirección de URL a un sitio no fiable en HP ArcSight ESM y HP ArcSight ESM Express, en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o versión 6.11.0 Patch 1. Esta vulnerabilidad podría explotarse de forma remota para permitir una redir... • https://softwaresupport.hpe.com/km/KM02996760 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 6.1EPSS: 0%CPEs: 28EXPL: 0

CVE-2017-13986

https://notcve.org/view.php?id=CVE-2017-13986

29 Sep 2017 — A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system. Una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite que se revele información de forma no intencionada cuando se envía una URL específica al sistema. • http://www.securityfocus.com/bid/100935 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 0%CPEs: 28EXPL: 0

CVE-2017-13988

https://notcve.org/view.php?id=CVE-2017-13988

29 Sep 2017 — An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function. Una vulnerabilidad de control de acceso incorrecto en ArcSight ESM y ArcSight ESM Express en cualquier versión 6.x anterior a la 6.9.1c Patch 4 o 6.11.0 Patch 1 permite que los usuarios sin autorización alteren el tamaño máximo de gr... • http://www.securityfocus.com/bid/100935 •