CVE-2024-2835 - OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

Back Back to CVE browser

HIGH

OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

Published May 20, 2024

8.7

HIGH

CVSS 3.1

EPSS 0.35%

Description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.

Affected products

Vendor OpenText Product ArcSight Enterprise Security Manager Default
affected
Affected
- ≥ 0, < 7.6.6
- ≥ 7.7.0, < 7.7.1
Vendor OpenText Product ArcSight Platform Default
unaffected
Affected
- ≥ 24.1.0, < 24.1.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
OpenText	ArcSight Enterprise Security Manager	affected	Affected ≥ 0, < 7.6.6 ≥ 7.7.0, < 7.7.1
OpenText	ArcSight Platform	unaffected	Affected ≥ 24.1.0, < 24.1.3