Critical · 9.1 CVE-2023-24470 EUVD-2023-28488GHSA-whx2-vvvv-hm68

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

Published Jun 13, 2023 · Updated Jan 6, 2025 · Assigned by OpenText

Description

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

Affected products

Vendor	Product	Affected	Fixed
—	ArcSight Logger	versions prior to 7.3.0	—

Advisories 1

WID-SEC-2023-2833 Micro Focus ArcSight: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2023

References