CVE-2023-24470
CRITICALArcSight Logger < 7.3.0 - XML External Entity Injection
Title source: llmDescription
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
References (3)
Core 3
Core References
Various Sources
https://www.microfocus.com/support/downloads/%2C
Scores
CVSS v3
9.1
EPSS
0.0017
EPSS Percentile
37.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-611
Status
published
Products (1)
microfocus/arcsight_logger
< 7.3.0
Published
Jun 13, 2023
Tracked Since
Feb 18, 2026