CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-25834

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.1%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600
https://www.cybereagle.io/blog/cve-2020-25834/
https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600
https://www.cybereagle.io/blog/cve-2020-25834/

Products affected by CVE-2020-25834

Microfocus » Arcsight Logger » Version: 6.61

cpe:2.3:a:microfocus:arcsight_logger:6.61
Microfocus » Arcsight Logger » Version: 7.0

cpe:2.3:a:microfocus:arcsight_logger:7.0
Microfocus » Arcsight Logger » Version: 7.0.1

cpe:2.3:a:microfocus:arcsight_logger:7.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25834

Products

Pricing

Contact Us