CVE-2019-11656 - Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0 · CoreCVE

Back Back to CVE browser

MEDIUM

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0

Published Oct 4, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.64%

Description

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Affected products

Vendor n/a Product ArcSight Logger. Default
n/a
- Version
  All versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

ArcSight Logger.

n/a

Version	Status	Constraints
All versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://community.microfocus.com/t5/ArcSight-Announcements/ArcSight-Logger-Fix-for-Security-Vulnerability/td-p/2699569
x_refsource_MISC

Link	Providers	Tags
https://community.microfocus.com/t5/ArcSight-Announcements/ArcSight-Logger-Fix-for-Security-Vulnerability/td-p/2699569		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microfocus

Published Oct 4, 2019

Updated Aug 4, 2024

Reserved May 1, 2019

Link CVE-2019-11656

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-11656

Severity n/a

Public date n/a

Links CVE-2019-11656