Micro Focus Vulnerabilities and Affected Products
Vulnerabilities associated with ArcSight Logger.
Products
Clear product- Service Manager8 vulnerabilities
- Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
- NetIQ Access Manager7 vulnerabilities
- Solutions Business Manager7 vulnerabilities
- ArcSight Management Center6 vulnerabilities
- Solutions Business Manager 11.45 vulnerabilities
- ArcSight Logger4 vulnerabilities
- Solutions Business Manager (SBM)4 vulnerabilities
- Dimensions CM3 vulnerabilities
- Filr3 vulnerabilities
- HP ArcSight ESM3 vulnerabilities
- HP ArcSight ESM Express3 vulnerabilities
- Operation Bridge Manager3 vulnerabilities
- Application Performance Management2 vulnerabilities
- Content Manager2 vulnerabilities
- Data Center Automation Containerized Suite2 vulnerabilities
- Fortify Software Security Center (SSC)2 vulnerabilities
- Hybrid Cloud Management2 vulnerabilities
- Hybrid Cloud Management Containerized Suite2 vulnerabilities
- Micro Focus ArcSight Logger2 vulnerabilities
- Micro Focus NetIQ Self Service Password Reset.2 vulnerabilities
- Micro Focus VisiBroker2 vulnerabilities
- NetIQ eDirectory 9.1 SP22 vulnerabilities
- Network Automation2 vulnerabilities
- Network Operations Management (NOM) Suite CDF2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-11851CRITICAL | Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code. CWE-94Nov 17, 2020 | CVSS9.8v3.1 | EPSS2.95% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-11860MEDIUM | Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS) CWE-79Nov 17, 2020 | CVSS6.1v3.1 | EPSS0.641% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-25834MEDIUM | Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS). CWE-79Nov 17, 2020 | CVSS5.4v3.1 | EPSS0.691% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-3485MEDIUM | ArcSight Logger stored cross site script issue in version prior to 6.7.1Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1 CWE-79Jul 24, 2019 | CVSS4.6v3.0 | EPSS1.15% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |