Lucene search
HistoryAug 08, 2012 - 10:26 a.m.
CVE-2012-2960
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.7%
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
Affected configurations
Node
hparcsight_connector_appliance_firmwareMatch6.0.0.60023.2
ORhparcsight_connector_appliance_firmwareMatch6.2.0.6244.0
hparcsight_connector_applianceMatchc1400
ORhparcsight_connector_applianceMatchc3400
ORhparcsight_connector_applianceMatchc5400
Node
hparcsight_logger_appliance_firmwareMatch5.2.0.6288.0
hparcsight_logger_applianceMatchl7400-san
Related
cvelist
cvelist
CVE-2012-2960
2012-08-08 10:00:00
cve
cve
CVE-2012-2960
2012-08-08 10:26:18
cert
cert
prion
prion
Cross site scripting
2012-08-08 10:26:00
securityvulns
securityvulns
nessus
nessus
HP ArcSight Logger < 5.3 Multiple Vulnerabilities (credentialed check)
2013-07-11 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.7%
Related for NVD:CVE-2012-2960