Cross-Site Scripting Vulnerability in Micro Focus ArcSight Enterprise Security Manager
CVE-2021-38127

6.1MEDIUM

Key Information:

Vendor

Microfocus
Status
Arcsight Enterprise Security Manager (esm)
Vendor
CVE Published:
14 January 2022

What is CVE-2021-38127?

Potential vulnerabilities have been detected in the Micro Focus ArcSight Enterprise Security Manager, specifically in versions 7.4.x and 7.5.x. These vulnerabilities may allow remote attackers to exploit XSS, potentially compromising user data and affecting the security integrity of the application. It is crucial for organizations utilizing these versions to apply necessary updates to mitigate risks associated with this vulnerability.

Affected Version(s)

ArcSight Enterprise Security Manager (ESM) Micro Focus ArcSight ESM 7.4.x and 7.5.x

References

https://portal.microfocus.com/s/article/KM000003453?langu...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.