CVE-2024-6357

CVE-2024-6357 is an Insecure Direct Object Reference vulnerability in OpenText ArcSight Intelligence. Public records show CVSS v3.1 metrics with high impact (C/H/I/A all high) and network-based access with low attack complexity and no user interaction required. Some connected sources (e.g., PT-20...

CVE-2024-6357 Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

CVE-2024-6359 Privilege escalation vulnerability

Privilege escalation vulnerability identified in OpenText ArcSight Intelligence...

CVE-2024-6359 Privilege escalation vulnerability

Privilege escalation vulnerability identified in OpenText ArcSight Intelligence...

CVE-2024-6358 Incorrect Authorization vulnerability

Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence...

CVE-2024-6358 Incorrect Authorization vulnerability

Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence...

CVE-2024-6358

The CVE-2024-6358 entry concerns OpenText ArcSight Intelligence with an Incorrect Authorization vulnerability. Public sources (NVD, Red Hat, CVE list, etc.) describe a network-exposed issue with low complexity and user interaction required (from the CNA vector) and potential high impact on confid...

PT-2024-37564 · Opentext · Opentext Arcsight Intelligence

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A privilege escalation issue has been identified. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

OpenText ArcSight Intelligence 安全漏洞

OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an elevation of privilege vulnerability...

OpenText ArcSight Intelligence 安全漏洞

OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an incorrect authorization vulnerability...

PT-2024-37563 · Opentext · Opentext Arcsight Intelligence

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A vulnerability related to incorrect authorization has been identified. Recommendations: At the moment, there is no information about a newer version that contains a...

OpenText ArcSight Intelligence 安全漏洞

OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an unsafe direct object reference vulnerability...

PT-2024-37562 · Opentext · Opentext Arcsight Intelligence

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A security issue has been identified in OpenText ArcSight Intelligence, related to an Insecure Direct Object Reference. Recommendations: At the moment, there is no...

CVE-2024-4190

CVE-2024-4190 : OpenText/OpenText ArcSight Logger is affected by a stored cross-site scripting (XSS) vulnerability. Multiple sources (NVD, Red Hat, CVE lists, CNNVD) describe it as a vulnerability that could be exploited remotely. CVSS v3.1 base scores are 8.1 (HIGH) with attack vector NETWORK, a...

CVE-2024-3482

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-2835

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-2835 OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-2835

CVE-2024-2835 is a Stored Cross-Site Scripting (XSS) vulnerability identified in OpenText ArcSight Enterprise Security Manager (ESM) and ArcSight Platform. Multiple sources corroborate that it can be exploited remotely, with a CVSS v3.1 base score of 8.7 ( HIGH ) and impact on confidentiality and...

CVE-2024-3482

The CVE-2024-3482 entry concerns OpenText ArcSight Enterprise Security Manager and ArcSight Platform, describing a Stored Cross-Site Scripting (XSS) vulnerability that could be remotely exploited. Concrete details from connected sources include: affected products (ArcSight ES Manager and ArcSight...

PT-2024-22400 · Opentext · Opentext Arcsight Platform +1

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Enterprise Security Manager affected versions not specified OpenText ArcSight Platform affected versions not specified Description: A Stored Cross-Site Scripting XSS issue has been identified. The issue could be remotely...