PT-2024-26235 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: The issue is related to an XML External Entity injection, which could lead to information disclosure and remote code execution. Recommendations: For OpenText iManager version 3.2.6.0200, at th...

PT-2024-26227 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Remote Code Execution issue has been discovered, which can trigger command injection and insecure deserialization issues. Recommendations: For OpenText iManager version 3.2.6.0200, at the...

PT-2024-28609 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A remote code execution issue has been discovered, which can trigger remote code execution using unsafe Java object deserialization. Recommendations: For OpenText iManager version 3.2.6.0200, ...

CVE-2024-3970: Server-Side Request Forgery (SSRF)

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal...

CVE-2024-3968: Improper Input Validation

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task...

CVE-2024-3967: Deserialization of Untrusted Data

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization...

CVE-2024-3488: Improper Input Validation

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication...

CVE-2024-3487: Improper Authentication

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication...

CVE-2024-3486: Improper Restriction of XML External Entity Reference

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution...

CVE-2024-3485: Server-Side Request Forgery (SSRF)

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure...

CVE-2024-3484: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure...

CVE-2024-3483: Deserialization of Untrusted Data

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues...

PT-2024-26231 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Path Traversal issue has been found in OpenText iManager, which can lead to privilege escalation or file disclosure. Recommendations: For OpenText iManager version 3.2.6.0200, at the moment,...

CVE-2024-2834

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-2834 OpenText ArcSight Management Center and ArcSight Platform Stored XSS

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-2834

CVE-2024-2834 affects OpenText ArcSight Management Center and ArcSight Platform with a Stored Cross-Site Scripting (XSS) vulnerability that could be remotely exploited. Distilled details from multiple sources indicate: vulnerable component/function is within ArcSight Management Center/ArcSight Pl...

CVE-2024-2834 OpenText ArcSight Management Center and ArcSight Platform Stored XSS

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited...

PT-2024-22397 · Opentext · Arcsight Platform +1

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Management Center and ArcSight Platform affected versions not specified Description: A Stored Cross-Site Scripting XSS issue has been identified, which could be remotely exploited. Recommendations: At the moment, there is no...

CVE-2024-2834: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited...

Micro Focus ArcSight Management Center 安全漏洞

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus, UK, that centrally manages ArcSight e.g., HPArcSightLogger, etc. deployments through a unified interface. A security vulnerability exists in OpenText ArcSight Management Center and ArcSight Platform tha...