CVE-2017-14357

CVE-2017-14357: vulnerability in Micro Focus HP ArcSight ESM

Published · Updated

Follow this CVE+ Monitor HP ArcSight ESM+ Monitor HP ArcSight ESM Express

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)
Affected products
Micro Focus · HP ArcSight ESMMicro Focus · HP ArcSight ESM Express
Related CVEs — Micro Focus HP ArcSight ESM

In the same product, most dangerous first.

CVE-2017-14356—CVE-2017-14356EPSS 1.8%CVE-2017-14358—CVE-2017-14358EPSS 1.2%