Lucene search

[email protected]CVE-2023-24470

HistoryJun 13, 2023 - 11:15 p.m.

CVE-2023-24470

2023-06-1323:15:08

CWE-611

[email protected]

web.nvd.nist.gov

cve-2023-24470

xml

external entity injection

arcsight logger

security vulnerability

nvd

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

Affected configurations

NVD

Node

microfocusarcsight_loggerRange<7.3.0

CPENameOperatorVersion
microfocus:arcsight_loggermicrofocus arcsight loggerlt7.3.0

CPE	Name	Operator	Version
microfocus:arcsight_logger	microfocus arcsight logger	lt	7.3.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ArcSight Logger",
    "versions": [
      {
        "version": "versions prior to 7.3.0",
        "status": "affected"
      }
    ]
  }
]

References

portal.microfocus.com/s/article/KM000018224?language=en_US

www.microfocus.com/documentation/arcsight/logger-7.3/logger-7.3-release-notes/

www.microfocus.com/support/downloads/%2C

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

Related for CVE-2023-24470

nvd1 prion1 cvelist1