CVE-2020-25832

CVE-2020-25832 is a reflected XSS vulnerability in Micro Focus Filr 4.2.1. Connected sources confirm the issue but do not provide concrete fix details or affected product variants beyond version 4.2.1. Exploitation details, exploit status, and remediation steps are not specified in the available ...

CVE-2020-11851

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code...

CVE-2020-11851

CVE-2020-11851 affects Micro Focus ArcSight Logger prior to 7.1.1. The connected documents confirm a remote code execution vulnerability in ArcSight Logger, exploitable via the ArcSight Management Center backup/config workflow that uses Tcl/expect scripts, leading to arbitrary code execution on v...

CVE-2020-11860

CVE-2020-11860 is a Cross-Site Scripting vulnerability in Micro Focus ArcSight Logger affecting all versions prior to 7.1.1. The connected documents indicate a remote XSS exposure in ArcSight Logger’s web-facing components, with no detailed exploit steps provided in the sources. The vulnerability...

CVE-2020-11860

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting XSS...

CVE-2020-25834

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting XSS...

CVE-2020-25834

CVE-2020-25834 is a cross-site scripting (XSS) vulnerability impacting Micro Focus ArcSight Logger, primarily affected version 7.1 (some sources mention 7.1.1). The issue could be exploited remotely to trigger XSS in the product. The Red Hat, NVD, and other feeds consistently describe a straightf...

Micro Focus Filr Cross-Site Scripting Vulnerability

Micro Focus Filr is a file access and sharing solution for businesses. A reflected cross-site scripting vulnerability exists in Micro Focus Filr 4.2.1. No detailed vulnerability details are provided at this time...

Micro Focus ArcSight Logger Arbitrary Code Execution Vulnerability

ArcSight Logger is a log management solution optimized for extremely high event throughput, efficient long-term storage and fast data analysis. An arbitrary code execution vulnerability exists in Micro Focus ArcSight Logger versions prior to 7.1.1. An attacker could exploit this vulnerability to...

PT-2020-6074

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure, which could allow an unauthenticated user...

PT-2020-12901

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions prior to 7.1.1 Description The issue is a Cross-Site Scripting vulnerability that could be remotely exploited, resulting in Cross-Site Scripting XSS. Recommendations For versions prior to 7.1.1, update to...

Trend Micro InterScan Web Security Virtual Appliance Buffer Error Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Trend Micro Web security gateway that provides dynamic, integrated security for enterprise networks against Web-based threats. A stack buffer overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance 6.5...

CVE-2020-25833: Improper Neutralization of Input During Web Page Generation

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack...

CVE-2020-11851: Improper Control of Generation of Code

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code...

CVE-2020-25834: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting XSS...

PT-2020-12893

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions prior to 7.1.1 Description The issue is an arbitrary code execution vulnerability that could be remotely exploited, resulting in the execution of arbitrary code. Recommendations For versions prior to 7.1.1,...

PT-2020-16233

Name of the Vulnerable Software and Affected Versions Micro Focus IDOL versions prior to 12.7 Description The issue is a Persistent cross-Site Scripting vulnerability that could be exploited to perform a Persistent XSS attack. Recommendations For versions prior to 12.7, update to version 12.7 or...

PT-2020-16232

Name of the Vulnerable Software and Affected Versions Micro Focus Filr version 4.2.1 Description The issue is a Reflected Cross Site scripting vulnerability that could be exploited to perform a Reflected XSS attack. Recommendations For version 4.2.1, update to a newer version that contains a fix...

Trend Micro InterScan Web Security Virtual Appliance: Operating System Command Injection Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command injection vulnerability exists in AddVLANItem in Trend Micro InterScan Web...

PT-2020-16234 · Micro Focus · Micro Focus Arcsight Logger

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger version 7.1 Description: The issue is a Cross-Site Scripting vulnerability that could be remotely exploited, resulting in Cross-Site Scripting XSS. Recommendations: For Micro Focus ArcSight Logger version 7.1, upda...