Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).
CVE-2022-26331

6.1MEDIUM

Key Information:

Vendor

Micro Focus

Status
Micro Focus Arcsight Logger
Vendor
CVE Published:
31 August 2022

What is CVE-2022-26331?

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.

Affected Version(s)

Micro Focus ArcSight Logger < unspecified

References

https://www.microfocus.com/support/downloads/
x_refsource_MISC
https://portal.microfocus.com/s/article/KM000010167?langu...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Micro Focus would like to give a special thanks to Michal Skowron for responsibly disclosing those vulnerabilities.
.