microfocus arcsight logger vulnerabilities

Latest microfocus arcsight logger CVEs

Newest publication first

1. CVE-2023-24470 Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

   Published 2023-06-13

   Critical·CVSS 9.1 EPSS 0.90%

   Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

2. CVE-2023-24469 Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0

   Published 2023-06-13

   Medium·CVSS 6.1 EPSS 0.47%

   Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0

3. CVE-2022-26331 Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).

   Published 2022-08-31

   Medium·CVSS 6.1 EPSS 0.46%

   Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version...

4. CVE-2022-26330 Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure.

   Published 2022-08-31

   High·CVSS 7.5 EPSS 0.69%

   Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version...

5. CVE-2020-11851 Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitra...

   Published 2020-11-17

   Critical·CVSS 9.8 EPSS 2.9%

   Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.

6. CVE-2020-11860 Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)

   Published 2020-11-17

   Medium·CVSS 6.1 EPSS 0.64%

   Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)

7. CVE-2020-25834 Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

   Published 2020-11-17

   Medium·CVSS 5.4 EPSS 0.69%

   Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

8. CVE-2020-11839 Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cros...

   Published 2020-06-12

   Medium·CVSS 6.1 EPSS 0.64%

   Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

9. CVE-2019-11657 Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack.

   Published 2019-12-17

   High·CVSS 8.8 EPSS 0.45%

   Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.