Cross site scripting

2012-08-0810:26:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.7%

JSON

Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.

CPENameOperatorVersion
arcsight_connector_applianceeq1400.0.99
arcsight_connector_applianceeq3400.0.99
arcsight_connector_applianceeq5400.0.99
arcsight_connector_appliance_firmwareeq6.0.0.60023.2
arcsight_connector_appliance_firmwareeq6.2.0.6244.0
arcsight_logger_applianceeql7400-san
arcsight_logger_appliance_firmwareeq5.2.0.6288.0

Name	Operator	Version
arcsight_connector_appliance	eq	1400.0.99
arcsight_connector_appliance	eq	3400.0.99
arcsight_connector_appliance	eq	5400.0.99
arcsight_connector_appliance_firmware	eq	6.0.0.60023.2
arcsight_connector_appliance_firmware	eq	6.2.0.6244.0
arcsight_logger_appliance	eq	l7400-san
arcsight_logger_appliance_firmware	eq	5.2.0.6288.0