CVE-2019-3481

Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7...

Cross site scripting

Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3479

Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7...

Remote code execution

Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3484

Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3484

The CVE describes a remote code execution vulnerability in Micro Focus ArcSight Logger, affecting versions prior to 6.7. The root cause is an input validation flaw in ArcSight Logger that can be exploited to execute arbitrary code. Affected component is ArcSight Logger’s input handling; impact in...

CVE-2019-3483

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3483

CVE-2019-3483 concerns ArcSight Logger prior to 6.7. The related documents indicate an information-disclosure vulnerability in ArcSight Logger versions before 6.7 and that mitigation exists for those versions. No exploitation details or patch version are explicitly provided in the connected docum...

CVE-2019-3482

The CVE concerns a directory traversal vulnerability in Micro Focus ArcSight Logger before version 6.7. Root cause: improper handling of path input leading to unauthorized information disclosure. Affected product: ArcSight Logger (versions prior to 6.7). Impact: potential disclosure of sensitive ...

CVE-2019-3482

Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3481

CVE-2019-3481 concerns a XML External Entity (XXE) parsing vulnerability in Micro Focus ArcSight Logger prior to version 6.7. The issue stems from insecure XML entity handling in the affected logger, enabling information disclosure or disruption of service as described in CNVD-2019-08313 (and mir...

CVE-2019-3481

Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3480

Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3480

ArcSight Logger prior to version 6.7 is affected by a cross-site scripting vulnerability (stored/reflected XSS). The CNVD entry confirms a XSS issue in ArcSight Logger = 6.7 or applying vendor-provided fixes, as described in the CNVD/CVE references. If applying updates, verify release notes speci...

CVE-2019-3479

Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3479

CVE-2019-3479 affects Micro Focus ArcSight Logger prior to 6.7, describing an input validation vulnerability that could allow remote code execution. The connected CNVD entry confirms the issue is a remote code execution vulnerability affecting ArcSight Logger versions before 6.7. There are no exp...

Micro Focus ArcSight Management Center Cross-Site Request Forgery Vulnerability

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HP ArcSight Logger, etc. deployments through a unified interface. A cross-site request forgery vulnerability exists in Micro Focus ArcMC versions prior to 2.81,...

Micro Focus ArcSight Management Center Cross-Site Scripting Vulnerability

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HP ArcSight Logger, etc. deployments through a unified interface. A cross-site scripting vulnerability exists in Micro Focus ArcMC versions prior to 2.81, which ca...

Micro Focus ArcSight Management Center Unauthenticated File Download Vulnerability

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HP ArcSight Logger, etc. deployments through a unified interface. An unauthenticated file download vulnerability exists in Micro Focus ArcMC versions prior to 2.81...

CVE-2018-6504

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...