CVE-2012-2960

Currently unrated

Key Information:

Vendor
HP
Status
Arcsight Connector Appliance Firmware
Arcsight Connector Appliance
Vendor
CVE Published:
8 August 2012

Summary

Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.

References

http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/...
vendor-advisoryx_refsource_HP
http://www.kb.cert.org/vuls/id/960468
third-party-advisoryx_refsource_CERT-VN
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/...
vendor-advisoryx_refsource_HP

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.