Vulnerabilities fixed in Microfocus ArcSight Logger

Micro Focus has fixed vulnerabilities in ArcSight Logger. A malicious party could exploit the vulnerabilities to launch a Cross-site Scripting attack, or an XML External Entity Injection. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access data...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

Xxe

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

Cross site scripting

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

CVE-2023-24469 affects Micro Focus ArcSight Logger prior to 7.3.0. The vulnerability is a Cross-Site Scripting issue arising in the web interface, with CVSS 3.1 base score 6.1 (Network, Low attack complexity, UI interaction required). Public advisories indicate that Micro Focus released version 7...

PT-2023-19627 · Micro Focus · Arcsight Logger

Name of the Vulnerable Software and Affected Versions: ArcSight Logger versions prior to 7.3.0 Description: The issue is related to a Potential XML External Entity Injection. Recommendations: For versions prior to 7.3.0, update to version 7.3.0 or later to resolve the issue...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

CVE-2023-24470

ArcSight Logger prior to version 7.3.0 is vulnerable to XML External Entity (XXE) injection (CVE-2023-24470). The root cause is XXE in the product’s XML processing, enabling an attacker to potentially access or exfiltrate data via crafted XML. Public advisories confirm fixes in ArcSight Logger 7....

CVE-2023-24469

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

Micro Focus ArcSight Logger 代码问题漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analyzing and retention. A security vulnerability exists in Micro Focus ArcSight Logg...

PT-2023-19625 · Micro Focus · Arcsight Logger

Name of the Vulnerable Software and Affected Versions: ArcSight Logger versions prior to 7.3.0 Description: The issue is related to Potential Cross-Site Scripting. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

Micro Focus ArcSight Logger 跨站脚本漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log-generating source for log management, searching, indexing, reporting, analysis and retention. A security vulnerability exists in Micro Focus ArcSight Logge...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

WordPress Lana Email Logger Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Lana Email Logger Type Plugin Vulnerable versions = 1.0.2 Fixed in 1.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3166 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 87d6e5f60784 Credits Alex Thomas Required...