CVE-2013-4815

Cross-site scripting XSS vulnerability in the web interface in HP ArcSight Enterprise Security Manager ESM before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2025-2517: Operation on a Resource after Expiration or Release

Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager...

CVE-2024-3482: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited...

Micro Focus ArcSight Enterprise Security Manager 安全漏洞

Micro Focus ArcSight Enterprise Security Manager is a suite of enterprise security management software with event correlation and security analytics from Micro Focus, UK. The software collects, correlates and reports on enterprise-wide security events in real-time so that anomalous or unauthorize...

CVE-2024-2835: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-0967: Undefined Security Weakness

A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Enterprise Security Manager ESM. The vulnerability could be remotely exploited...

CVE-2021-38126

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS...

Micro Focus ArcSight Enterprise Security Manager跨站脚本漏洞

Micro Focus ArcSight Enterprise Security Manager is a suite of enterprise security management software with event correlation and security analytics from Micro Focus, UK. The software collects, correlates and reports on enterprise-wide security events in real time so that anomalous or unauthorize...

CVE-2021-38127: Improper Neutralization of Input During Web Page Generation

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS...

CVE-2021-38126: Improper Neutralization of Input During Web Page Generation

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS...

CVE-2021-38124: Improper Neutralization of Special Elements used in a Command

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

Micro Focus ArcSight Enterprise Security Manager 命令注入漏洞

Micro Focus ArcSight Enterprise Security Manager is a suite of enterprise security management software with event correlation and security analytics from Micro Focus, UK. The software collects, correlates and reports on enterprise-wide security events in real time so that anomalous or unauthorize...

CVE-2020-9522

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-9522: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2017-14356

An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection...

HP ArcSight Enterprise Security Manager and Enterprise Security Manager Express Access Control Error Vulnerability (CNVD-2017-30913)

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software with event correlation and security analysis capabilities from Hewlett Packard Enterprise HPE. The software collects, correlates and reports on enterprise-wide security events in real time...

HP ArcSight ESM and ESM Express Arbitrary File Download Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software from Hewlett-Packard HP that combine event correlation and security analysis capabilities. The software collects, correlates and reports on enterprise-wide security events in real time so...

HP ArcSight ESM and ESM Express Command Execution Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software from Hewlett-Packard HP that combine event correlation and security analysis capabilities. The software collects, correlates and reports on enterprise-wide security events in real time so...

CVE-2014-7885: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager ESM before 6.8c have unknown impact and remote attack vectors...

CVE-2013-4815: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in HP ArcSight Enterprise Security Manager ESM before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...