Skip to content
OpenAdvisories
Unscored CVE-2017-13986 EUVD-2017-5501GHSA-wm75-mhmv-rq2w

A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.…

Published Sep 29, 2017 · Updated Aug 5, 2024 · Assigned by microfocus

Description

A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system.

References