Stored and Reflected XSS Vulnerability in ArcSight Logger by Micro Focus
CVE-2019-3480

6.1MEDIUM

Key Information:

Vendor

HP
Status
Arcsight Logger
Vendor
CVE Published:
25 March 2019

What is CVE-2019-3480?

A stored and reflected cross-site scripting (XSS) vulnerability exists in ArcSight Logger software, affecting all versions prior to 6.7. This issue can potentially allow an attacker to inject malicious scripts into web pages viewed by users, leading to unauthorized access and data manipulation. Organizations using affected versions of ArcSight Logger are advised to apply the necessary updates to mitigate this risk.

Affected Version(s)

ArcSight Logger Versions prior to 6.7

References

https://softwaresupport.softwaregrp.com/doc/KM03355866
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.