CVE-2011-0770

HP Windows Event Log Smartconnector < 6.0.0.60023.2 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.

References (4)

Scores

EPSS 0.0133
EPSS Percentile 79.8%

Classification

CWE
CWE-79
Status published

Affected Products (8)

hp/windows_event_log_smartconnector < 6.0.0.60023.2
hp/arcsight_c1000_appliance
hp/arcsight_c1300_appliance
hp/arcsight_c3200_appliance
hp/arcsight_c3400_appliance
hp/arcsight_c5200_appliance
hp/arcsight_c5400_appliance
n/a/n/a

Timeline

Published Jul 19, 2011
Tracked Since Feb 18, 2026