CVE-2020-11840

CVE-2020-11840 affects Micro Focus ArcSight Management Center (ArcMC). Affected versions include 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The issue allows remote an unauthorized information disclosure. Remediation: upgrade to 2.9.4 or later (as indicated by “prior to 2.9.4”). If upgrading i...

CVE-2020-11841

CVE-2020-11841 affects Micro Focus ArcSight Management Center (ArcMC) across versions 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The vulnerability is an unauthorized information disclosure that can be exploited remotely, with a network attack vector and low complexity; authentication is requi...

CVE-2020-11838

CVE-2020-11838 is a Cross-Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center. Affected versions are 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The vulnerability arises from lack of proper validation of client-side data in the web application, allowing remote exploita...