Skip to content
OpenAdvisories
Unscored CVE-2017-14357 EUVD-2017-5860GHSA-27rj-8jq2-2jf3

A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to…

Published Oct 31, 2017 · Updated Sep 17, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: HP ArcSight ESM Product: HP ArcSight ESM Express

Description

A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)

Affected products

VendorProductAffectedFixed
Micro Focus HP ArcSight ESM Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 —
Micro Focus HP ArcSight ESM Express Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 —

References