CVE-2020-11838: XSS
Published Jun 16, 2020
·Updated
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
Affected Software
2 affected components
MicroFocus Arcsight Management Center>=2.7.0<2.9.4
MicroFocus Arcsight Management Center=2.6.1
Event History
Jun 16, 2020
CVE Published
via MITRE·01:13 PM
Data Sourced
via MITRE·01:13 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-11838?
The severity of CVE-2020-11838 is medium with a CVSS score of 5.4.
2
What is the affected software for CVE-2020-11838?
The affected software for CVE-2020-11838 is Micro Focus ArcSight Management Center versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4.
3
How can CVE-2020-11838 be exploited?
CVE-2020-11838 can be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
4
How can I fix CVE-2020-11838?
To fix CVE-2020-11838, update to version 2.9.4 of Micro Focus ArcSight Management Center.
5
What is the Common Weakness Enumeration (CWE) for CVE-2020-11838?
The Common Weakness Enumeration (CWE) for CVE-2020-11838 is CWE-79.