First published: Wed Aug 31 2022(Updated: )
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.
Credit: security@microfocus.com security@microfocus.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microfocus Arcsight Logger | <7.2.2 |
Micro Focus has made the following mitigation information available to resolve the vulnerabilities for the impacted versions of ArcSight Logger: • Logger 7.2.2 https://www.microfocus.com/support/downloads/
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2022-26330.
Micro Focus ArcSight Logger versions prior to v7.2.2 are affected by this vulnerability.
The severity of CVE-2022-26330 is high with a severity value of 7.5.
This vulnerability could be remotely exploited resulting in information disclosure or self cross-site scripting (XSS) attacks.
To fix CVE-2022-26330, update Micro Focus ArcSight Logger to version 7.2.2 or later.