XSS in Micro Focus Arcsight Logger
CVE-2022-26331
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (30.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Micro Focus Arcsight Logger — versions unspecified
- Microfocus Arcsight_logger
Weakness classification (CWE)
References
- security@opentext.com (x_refsource_MISC)
- security@opentext.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-26331?
- CVE-2022-26331 is a medium-severity vulnerability in Micro Focus Arcsight Logger, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2022-08-31.
- How severe is CVE-2022-26331?
- Medium severity. CVSS v3 base score is 6.1 out of 10.