Skip to content
OpenAdvisories
High · 8.8 CVE-2018-6504 EUVD-2018-18260GHSA-j3j3-gw6m-h758

MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

Published Sep 20, 2018 · Updated Sep 16, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: ArcSight Management Center

Description

A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).

Affected products

VendorProductAffectedFixed
Micro Focus ArcSight Management Center all versions prior to 2.81 —

References