CVE-2015-5441
published 2015-11-12CVE-2015-5441: Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.94%
77.8th percentile
Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | archsight_management_center | <= 2.0 | — |
| hp | arcsight_logger | <= 6.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://jvn.jp/en/jp/JVN51046809/index.htmlhttp://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-005909.htmlhttp://www.securityfocus.com/archive/1/536877/100/0/threadedhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04797406http://jvn.jp/en/jp/JVN51046809/index.htmlhttp://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-005909.htmlhttp://www.securityfocus.com/archive/1/536877/100/0/threadedhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04797406
2015-11-12
Published