Skip to content
OpenAdvisories
Unscored CVE-2017-14358 EUVD-2017-5861GHSA-25c7-67gf-gc43

A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch …

Published Oct 31, 2017 · Updated Sep 16, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: HP ArcSight ESM Product: HP ArcSight ESM Express

Description

A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site.

Affected products

VendorProductAffectedFixed
Micro Focus HP ArcSight ESM Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 —
Micro Focus HP ArcSight ESM Express Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 —

References