CVE-2020-9522

CVE-2020-9522 is an XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) web interface, affecting versions 7.0.x, 7.2 and 7.2.1 . The root cause is described as insufficient validation of client data in the web application, enabling attackers to execute client-side script a...

CVE-2020-9522

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11838: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11841: Undefined Security Weakness

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-11840: Undefined Security Weakness

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

CVE-2020-9522: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11839

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11839

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

Cross site scripting

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11839

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

CVE-2020-11839

The CVE-2020-11839 entry affects Micro Focus ArcSight Logger, specifically versions 6.6.1 through 7.0.1. The vulnerability is a Cross-Site Scripting (XSS) issue in the web application caused by insufficient validation of client-side data, with potential remote exploitation leading to XSS or infor...

CVE-2020-11839: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

Micro Focus ArcSight Enterprise Security Manager Cross-Site Scripting Vulnerability

Micro Focus ArcSight Enterprise Security Manager is a suite of enterprise security management software with event correlation and security analytics from Micro Focus, UK. The software collects, correlates and reports on enterprise-wide security events in real time so that anomalous or unauthorize...

Micro Focus ArcSight Management Center Cross-Site Scripting Vulnerability (CNVD-2020-34713)

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HPArcSightLogger, etc. deployments through a unified interface. A cross-site scripting vulnerability exists in Micro Focus ArcSight Management Center. The...

Micro Focus ArcSight Management Center Information Disclosure Vulnerability (CNVD-2020-34714)

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HPArcSightLogger, etc. deployments through a unified interface. An information disclosure vulnerability exists in Micro Focus ArcSight Management Center. An attack...

Micro Focus ArcSight Management Center Information Disclosure Vulnerability

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HPArcSightLogger, etc. deployments through a unified interface. An information disclosure vulnerability exists in Micro Focus ArcSight Management Center. An attack...

Micro Focus ArcSight Logger Cross-Site Scripting Vulnerability (CNVD-2020-36749)

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in Micro Focus...

CVE-2020-11844

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

Authorization

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

CVE-2020-11844

CVE-2020-11844 describes an Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation. Affected products and versions include Hybrid Cloud Management (2018.05–2019.11), ArcSight Investigate (2.4.0, 3.0.0, 3.1.0), ArcSight Transformation Hub (3.0.0, 3.1.0, 3.2.0), ArcSig...