XSS in HP Arcsight Connector Appliance
CVE-2012-2960
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.
Affected products
- Hp Arcsight_connector_appliance — versions c1400, c3400, c5400
- Hp Arcsight_connector_appliance_firmware — versions 6.0.0.60023.2, 6.2.0.6244.0
- Hp Arcsight_logger_appliance — versions l7400-san
- Hp Arcsight_logger_appliance_firmware — versions 5.2.0.6288.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)