CVE-2024-2835: Opentext Arcsight Enterprise Security Manager

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.

Affected products

• Opentext Arcsight Enterprise Security Manager: before 7.6.6 (fixed in 7.6.6); from 7.7.0, before 7.7.1 (fixed in 7.7.1)
• Opentext Arcsight Platform: from 24.1.0, before 24.1.3 (fixed in 24.1.3)

Published 2024-05-20. Last modified 2026-06-17.