CVE-2011-0770

CVE-2011-0770 affects HP ArcSight Connector Appliance's Windows Event Log SmartConnector prior to 6.1. The issue is a cross-site scripting (XSS) vulnerability caused by insufficient sanitization in exported reports, allowing an attacker to inject script via the Windows XP variable in the exported...

CVE-2011-2779

The CVE-2011-2779 entry concerns HP ArcSight Connector Appliance (Windows Event Log SmartConnector) prior to v6.1, where exported reports can have world-writable permissions. This allows local users to alter or delete log data by modifying the file. The flaw is due to improper file permissions in...