CVE-2020-11860

MEDIUM

Micro Focus ArcSight Logger < 7.1.1 - Cross-Site Scripting

Title source: llm

Description

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)

References (1)

Core 1

Core References

Various Sources x_refsource_confirm

https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600

Scores

CVSS v3 6.1

EPSS 0.0024

EPSS Percentile 47.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

microfocus/arcsight_logger < 7.1.1

Published Nov 17, 2020

Tracked Since Feb 18, 2026