Information disclosure

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

Information disclosure

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-11841

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-11841

CVE-2020-11841 affects Micro Focus ArcSight Management Center (ArcMC) across versions 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The vulnerability is an unauthorized information disclosure that can be exploited remotely, with a network attack vector and low complexity; authentication is requi...

CVE-2020-11838

CVE-2020-11838 is a Cross-Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center. Affected versions are 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The vulnerability arises from lack of proper validation of client-side data in the web application, allowing remote exploita...

CVE-2020-11838

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11840

CVE-2020-11840 affects Micro Focus ArcSight Management Center (ArcMC). Affected versions include 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The issue allows remote an unauthorized information disclosure. Remediation: upgrade to 2.9.4 or later (as indicated by “prior to 2.9.4”). If upgrading i...

CVE-2020-11840

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-9522

CVE-2020-9522 is an XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) web interface, affecting versions 7.0.x, 7.2 and 7.2.1 . The root cause is described as insufficient validation of client data in the web application, enabling attackers to execute client-side script a...

CVE-2020-9522

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11838: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

PT-2020-12887

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Management Center versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4 Description The issue is related to an unauthorized information disclosure vulnerability. This vulnerability could be remotely exploited, resulting in...

PT-2020-12884

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Management Center versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4 Description The issue is related to a Cross Site Scripting XSS vulnerability, which could be remotely exploited, resulting in Cross-Site Scripting XSS or...

PT-2020-12886

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Management Center versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4 Description The issue is related to an unauthorized information disclosure. It could be remotely exploited, resulting in unauthorized information...

PT-2020-20712

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Enterprise Security Manager ESM versions 7.0.x, 7.2, 7.2.1 Description The issue is related to a Cross Site Scripting XSS vulnerability, which could be remotely exploited, potentially resulting in Cross-Site Scripting XSS ...

CVE-2020-11841: Undefined Security Weakness

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-11840: Undefined Security Weakness

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-9522: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

Zero Trust—Part 1: Networking

Enterprises used to be able to secure their corporate perimeters with traditional network controls and feel confident that they were keeping hackers out. However, in a mobile- and cloud-first world, in which the rate and the sophistication level of security attacks are increasing, they can no...

CVE-2020-11839

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...