383
VMScore

CVE-2017-13986

Published: 30/09/2017 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version before 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system.

Vulnerable Product Search on Vulmon Subscribe to Product

hp arcsight enterprise security manager 6.8

hp arcsight enterprise security manager 6.5

hp arcsight enterprise security manager 6.0

hp arcsight enterprise security manager 6.11.0

hp arcsight enterprise security manager 6.0c

hp arcsight enterprise security manager 6.5c

hp arcsight enterprise security manager 6.8c

hp arcsight enterprise security manager 6.9.0c

hp arcsight enterprise security manager 6.9.1c

hp arcsight enterprise security manager express 6.11.0

hp arcsight enterprise security manager express 6.8

hp arcsight enterprise security manager express 6.8c

hp arcsight enterprise security manager express 6.5c

hp arcsight enterprise security manager express 6.5

hp arcsight enterprise security manager express 6.0c

hp arcsight enterprise security manager express 6.0

hp arcsight enterprise security manager express 6.9.1c

hp arcsight enterprise security manager express 6.9.0