XSS in Microfocus Arcsight Enterprise Security Manager
CVE-2013-4815
Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.
Affected products
- Microfocus Arcsight_enterprise_security_manager
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)