CVE-2017-14357: XSS
A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14357?
CVE-2017-14357 has a severity rating that indicates a medium level of risk due to its potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2017-14357?
To fix CVE-2017-14357, you should update HP ArcSight ESM or HP ArcSight ESM Express to versions 6.9.1c Patch 4 or 6.11.0 Patch 1 or later.
What are the affected versions for CVE-2017-14357?
CVE-2017-14357 affects any version of HP ArcSight ESM and HP ArcSight ESM Express prior to 6.9.1c Patch 4 or 6.11.0 Patch 1.
Can CVE-2017-14357 be exploited remotely?
Yes, CVE-2017-14357 can be exploited remotely through reflected and stored Cross-Site Scripting (XSS) vulnerabilities.
What is the nature of the vulnerability in CVE-2017-14357?
CVE-2017-14357 is a Reflected and Stored Cross-Site Scripting (XSS) vulnerability that can allow attackers to inject malicious scripts.