Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-14357

A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This v

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus HP ArcSight ESM

  • Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1affected

Micro Focus HP ArcSight ESM Express

  • Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1affected

References