CVE-2019-11656: HP Arcsight Logger

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Affected products

• HP Arcsight Logger: before 6.7.1 (fixed in 6.7.1); version 6.7.1 only

Published 2019-10-04. Last modified 2026-06-17.