Advisories · Technology
ArcSight Logger.
Every CVE that names ArcSight Logger among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
XML external entity injection in ArcSight Logger
- ArcSight Logger
- XML external entities (XXE)
- CVSS 6.1 Medium
Cross-site scripting in ArcSight Logger
- ArcSight Logger
- Cross-site scripting (XSS)
-
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1.
- ArcSight Logger.
-
Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0.
- ArcSight Logger.
-
Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later.
- ArcSight Logger.
-
Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.
- ArcSight Logger
-
Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.
- ArcSight Logger
-
Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.
- ArcSight Logger
-
Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.
- ArcSight Logger
-
Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.
- ArcSight Logger
-
Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
- ArcSight Logger