XSS in HP Arcsight C1000 Appliance
CVE-2011-0770
Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.035 (88.0th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)