Lucene search

[email protected]CVE-2023-24469

HistoryJun 13, 2023 - 10:15 p.m.

CVE-2023-24469

2023-06-1322:15:09

CWE-79

[email protected]

web.nvd.nist.gov

xss

cross-site scripting

arcsight logger

cve-2023-24469

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

33.7%

JSON

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0

Affected configurations

NVD

Node

microfocusarcsight_loggerRange≤7.3.0

CPENameOperatorVersion
microfocus:arcsight_loggermicrofocus arcsight loggerle7.3.0

CPE	Name	Operator	Version
microfocus:arcsight_logger	microfocus arcsight logger	le	7.3.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ArcSight Logger",
    "versions": [
      {
        "version": "versions prior to 7.3.0",
        "status": "affected"
      }
    ]
  }
]

References

portal.microfocus.com/s/article/KM000018224?language=en_US%2C

www.microfocus.com/documentation/arcsight/logger-7.3/logger-7.3-release-notes/

www.microfocus.com/support/downloads/

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

33.7%

JSON

Related for CVE-2023-24469

prion1 cvelist1 nvd1