Cross-Site Scripting in HP ArcSight Enterprise Security Manager Web Interface
CVE-2013-4815
Currently unrated
Key Information:
- Vendor
Microfocus
- Vendor
- CVE Published:
- 20 September 2013
What is CVE-2013-4815?
A cross-site scripting (XSS) vulnerability exists within the web interface of HP ArcSight Enterprise Security Manager (ESM) prior to version 5.5. This flaw permits remote attackers to inject arbitrary web scripts or HTML into the interface via unspecified vectors, potentially impacting the security of users interacting with the web interface. Prompt remediation is essential to mitigate risks associated with unauthorized actions or information disclosures.