microfocus arcsight management center vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS).

Microfocus Arcsight Management Center

8.8

CVSSv3

A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited.

Microfocus Arcsight Management Center

7.5

CVSSv3

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service.

Microfocus Arcsight Management Center

4.3

CVSSv3

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x before 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure.

Microfocus Arcsight Management Center Microfocus Arcsight Management Center 2.6.1

4.3

CVSSv3

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x before 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure.

Microfocus Arcsight Management Center Microfocus Arcsight Management Center 2.6.1

5.4

CVSSv3

Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x before 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

Microfocus Arcsight Management Center Microfocus Arcsight Management Center 2.6.1

9.8

CVSSv3

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, ...

Microfocus Service Management Automation 2018.05 Microfocus Service Management Automation 2018.08 Microfocus Service Management Automation 2018.11 Microfocus Service Management Automation 2019.02 Microfocus Service Management Automation 2019.05 Microfocus Service Management Automation 2019.08 Microfocus Service Management Automation 2019.11 Microfocus Service Management Automation 2020.02

8.8

CVSSv3

A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions before 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).

Microfocus Arcsight Management Center

NA

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.

Hp Arcsight Connector Appliance Hp Arcsight Logger 6.0.0.7307.1 Hp Arcsight Command Center 6.8.0.1896.0 Microfocus Arcsight Enterprise Security Manager Hp Arcsight Express 4.0 Hp Arcsight Management Center Hp Arcsight Connectors

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook