Lucene search

K
nvd[email protected]NVD:CVE-2020-25835
HistoryDec 09, 2023 - 2:15 a.m.

CVE-2020-25835

2023-12-0902:15:06
CWE-79
web.nvd.nist.gov
4
vulnerability
remote exploitation
cross-site scripting
arcsight management center

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.0%

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS).

Affected configurations

Nvd
Node
microfocusarcsight_management_centerRange2.9.02.9.6
VendorProductVersionCPE
microfocusarcsight_management_center*cpe:2.3:a:microfocus:arcsight_management_center:*:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.0%

Related for NVD:CVE-2020-25835