CVE-2025-2517

LOW

OpenText ArcSight - Info Disclosure

Title source: llm
STIX 2.1

Description

Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.

References (1)

Core 1
Core References
Various Sources vendor-advisory
https://portal.microfocus.com/s/article/KM000040103

Scores

CVSS v4 2.3
EPSS 0.0036
EPSS Percentile 27.2%
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-672
Status published
Products (4)
OpenText/ArcSight Enterprise Security Manager < 7.6.6
OpenText/ArcSight Enterprise Security Manager 24.1 - 25.1
OpenText/ArcSight Enterprise Security Manager 7.7.0 - 7.7.1
OpenText/ArcSight Enterprise Security Manager 7.8.0 - 7.8.1
Published Apr 21, 2025
Tracked Since Feb 18, 2026