OpenText ArcSight Management Center and Platform Vulnerable to Stored XSS Attacks

CVE-2024-2834

Summary

A vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform that allows for stored cross-site scripting (XSS). This security flaw can be exploited by an attacker to inject malicious scripts into web pages viewed by other users, enabling potential unauthorized access to sensitive data or session hijacking. The vulnerability underscores the importance of implementing robust input validation and output encoding practices to safeguard against XSS attacks, especially for web applications capable of remote exploitation.

References