micro focus ArcSight Logger vulnerabilities

Latest micro focus ArcSight Logger CVEs

Newest publication first

1. CVE-2020-11851 Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitra...

   Published 2020-11-17

   Critical·CVSS 9.8 EPSS 2.9%

   Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.

2. CVE-2020-11860 Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)

   Published 2020-11-17

   Medium·CVSS 6.1 EPSS 0.64%

   Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)

3. CVE-2020-25834 Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

   Published 2020-11-17

   Medium·CVSS 5.4 EPSS 0.69%

   Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

4. CVE-2019-3485 ArcSight Logger stored cross site script issue in version prior to 6.7.1

   Published 2019-07-24

   Medium·CVSS 6.1 EPSS 1.1%

   Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.