medium4.3
CVE-2011-0770
Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject ar…
Impact
Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Windows Event Log Smartconnector | through 6.0.0.60023.2 |
| Hp | Arcsight C1000 Appliance | All versions |
| Hp | Arcsight C1300 Appliance | All versions |
| Hp | Arcsight C3200 Appliance | All versions |
| Hp | Arcsight C3400 Appliance | All versions |
| Hp | Arcsight C5200 Appliance | All versions |
| Hp | Arcsight C5400 Appliance | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1025791
- http://www.kb.cert.org/vuls/id/122054
- http://www.securityfocus.com/bid/48694
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68569
- http://securitytracker.com/id?1025791
- http://www.kb.cert.org/vuls/id/122054
- http://www.securityfocus.com/bid/48694
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68569