CVE-2021-38127 — Cross-site Scripting in Arcsight Enterprise Security Manager

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 52.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microfocus Arcsight Enterprise Security Manager
Timeline
PublishedJan 14
Latest updateJan 15

Description

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-fwj6-jcg8-332c: Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7↗2022-01-15
▶
CVEList
CVE-2021-38127: Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7↗2022-01-14
▶
CVE-2021-38127 — Cross-site Scripting | cvebase