CVE-2020-11838

Published: Jun 16, 2020Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

Affected (2)

Products: Microfocus: Arcsight Management Center

1 product

Arcsight Management Center

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microfocus Arcsight Management Center	From 2.7.0 to 2.9.4
Microfocus Arcsight Management Center	Version 2.6.1

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://softwaresupport.softwaregrp.com/doc/KM03650893

Source: security@opentext.com

https://softwaresupport.softwaregrp.com/doc/KM03650893

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.