Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-2835

OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenText

Description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText ArcSight Enterprise Security Manager

Default version status: affected

  • 0 to < 7.6.6affected
  • 7.7.0 to < 7.7.1affected

OpenText ArcSight Platform

Default version status: unaffected

  • 24.1.0 to < 24.1.3affected

References