CVE-2020-9522: Micro Focus Arcsight Enterprise Security Manager Express

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

Affected products

• Micro Focus Arcsight Enterprise Security Manager Express: from 7.0.0, up to and including 7.2.1

Published 2020-06-16. Last modified 2026-06-17.