Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-14358

A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus HP ArcSight ESM

  • Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1affected

Micro Focus HP ArcSight ESM Express

  • Any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1affected

References