Micro Focus International
Records274All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical63CVSS 9.0–10.0
CVSS high95CVSS 7.0–8.9
Exploited now
Micro Focus International records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00895 · Published 2023-06-13 · Fixed in 7.3.0 CWE-611
Priority MEDIUM 47
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02948 · Published 2020-11-17 · No fix listed CWE-94
Priority LOW 38
Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00452 · Published 2019-12-17 · No fix listed CWE-352
Priority LOW 34
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00686 · Published 2022-08-31 · Fixed in v7.2.2
Priority LOW 28
Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00472 · Published 2023-06-13 · Fixed in 7.3.0 CWE-79
Priority LOW 28
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00458 · Published 2022-08-31 · Fixed in v7.2.2 CWE-79
Priority LOW 28
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00641 · Published 2020-11-17 · No fix listed CWE-79
Priority LOW 28
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00641 · Published 2020-06-12 · No fix listed CWE-79
Priority LOW 26
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00691 · Published 2020-11-17 · No fix listed CWE-79
Open these records in search →