CVE-2011-0770: HP Arcsight c1000 Appliance

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.

Affected products

• HP Arcsight c1000 Appliance: any version
• HP Arcsight c1300 Appliance: any version
• HP Arcsight c3200 Appliance: any version
• HP Arcsight c3400 Appliance: any version
• HP Arcsight c5200 Appliance: any version
• HP Arcsight c5400 Appliance: any version
• HP Windows Event Log Smartconnector: up to and including 6.0.0.60023.2

Published 2011-07-19. Last modified 2026-06-16.