Lucene search

OpenTextCVELIST:CVE-2024-4190

HistoryJun 11, 2024 - 5:48 p.m.

CVE-2024-4190 OpenText ArcSight Logger Stored XSS

2024-06-1117:48:21

CWE-79

OpenText

www.cve.org

cve-2024-4190

opentext

arcsight logger

stored xss

cross-site scripting

vulnerabilities

remotely exploited

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

8.4 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/SC:L/VI:H/SI:L/VA:N/SA:N

0.0004 Low

EPSS

Percentile

9.1%

JSON

Stored Cross-Site Scripting (XSS) vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "ArcSight Logger",
    "vendor": "OpenText",
    "versions": [
      {
        "lessThan": "7.3.0 P4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

portal.microfocus.com/s/article/KM000030655

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

8.4 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/SC:L/VI:H/SI:L/VA:N/SA:N

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVELIST:CVE-2024-4190