Description
A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenText | ArcSight Enterprise Security Manager | < 7.6.6, 7.7.0 – < 7.7.1 | 7.6.6 |
| OpenText | ArcSight Platform | 24.1.0 – < 24.1.3 | 24.1.3 |
Advisories 1
- WID-SEC-2024-1185 Micro Focus ArcSight: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · May 20, 2024
References
- https://portal.microfocus.com/s/article/KM000029773 vendor-advisory