CVE-2012-3286

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2012-5198

Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-5199

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2012-3286

CVE-2012-3286: Unspecified vulnerability in HP ArcSight Connector Appliance ≤6.3 and ArcSight Logger ≤5.2 that could allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. HP’s security bulletin SSRT101056/HPSBMU02836 indic...

CVE-2012-5198

HP ArcSight Connector Appliance older than 6.3 and ArcSight Logger older than 5.2 are affected by CVE-2012-5198, a remote information-disclosure vulnerability with unknown vectors. HP's security bulletin HPSBMU02836/SSRT notes remediation: upgrade to ArcSight Connector Appliance 6.4 and ArcSight ...

CVE-2012-5199

CVE-2012-5199 affects HP ArcSight Connector Appliance ≤6.3 and ArcSight Logger ≤5.2. Root cause is an unspecified vulnerability that could allow remote authenticated users to execute arbitrary code via unknown vectors. HP’s security bulletin SSRT101056 indicates remediation by updating to ArcSigh...

PT-2013-1766

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions 6.3 and earlier HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote authenticated users to execute arbitrary code. The exact vectors used for exploitation are not specified...

PT-2013-1765

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.3 HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote attackers to obtain sensitive information via unknown vectors. Recommendations For HP ArcSight Connector...

PT-2013-1592

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions 6.3 and earlier HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service. The exact...

CVE-2012-3286: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2012-5198: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-5199: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors...

PT-2013-19: XML External Entities Resolution vulnerability in HP ArcSight Connector

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in HP ArcSight Connector. An attacker is able to import a specially crafted XML file, which would force ArcSight Connector to disclose local or remote resources to a malicious server on...

CVE-2012-2960

Cross-site scripting XSS vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file...

Cross site scripting

Cross-site scripting XSS vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file...

CVE-2012-2960

Cross-site scripting XSS vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file...

CVE-2012-2960

CVE-2012-2960 affects HP ArcSight Connector Appliance 6.2.0.6244.0 and ArcSight Logger 5.2.0.6288.0, with a cross-site scripting (XSS) flaw in the file import feature that allows a crafted file to execute arbitrary script in the web GUI. CERT/HP notes remote disclosure of information, and possibl...

PT-2012-4393

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector appliance version 6.2.0.6244.0 HP ArcSight Logger appliance version 5.2.0.6288.0 Description A cross-site scripting XSS issue exists in the import functionality, allowing remote attackers to inject arbitrary web script or...

CVE-2012-2960: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file...

HP Arcsight Logger and Connector appliances cross-site scripting vulnerability

Overview HP's Arcsight Connector appliance v6.2.0.6244.0 and Arcsight Logger appliance v5.2.0.6288.0 and possibly other versions contain a file import facility which is vulnerable to cross-site scripting XSS. Description The supplied facility for importing host data from a file System Admin Tab |...