CVE-2012-2960

Published: Aug 8, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.

Affected (7)

Products: Hp: Arcsight Connector Appliance Firmware, Arcsight Connector Appliance, Arcsight Logger Appliance Firmware, Arcsight Logger Appliance

4 products

Arcsight Connector Appliance Firmware

Arcsight Connector Appliance

Arcsight Logger Appliance Firmware

Arcsight Logger Appliance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hp Arcsight Connector Appliance Firmware	Version 6.0.0.60023.2
Hp Arcsight Connector Appliance Firmware	Version 6.2.0.6244.0
Hp Arcsight Connector Appliance	Version c1400
Hp Arcsight Connector Appliance	Version c3400
Hp Arcsight Connector Appliance	Version c5400