Micro Focus Arcsight Management Center vulnerabilities

9 CVEs affecting Micro Focus Arcsight Management Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9841, published 2024-11-08.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-11848, published 2020-08-19. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a…
• CVE-2020-11841, published 2020-06-16. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be…
• CVE-2020-11840, published 2020-06-16. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be…
• CVE-2018-6504, published 2018-09-20. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for…
• CVE-2020-11838, published 2020-06-16. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely…
• CVE-2024-2834, published 2024-04-08. High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days. A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.
• CVE-2023-32267, published 2023-08-11. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited.
• CVE-2020-25835, published 2023-12-09. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS).
• CVE-2024-9841, published 2024-11-08. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.