Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior
Críticas / altas1419▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7) | 0.24% | — | Microfocus Arcsight Management CenterMicrofocus Arcsight Platform | 8/11/2024 | 17/6/2026 | A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited. | |
| Aplazada | Alta (8.7) | 0.50% | — | Opentext Arcsight Management CenterAIOpentext Arcsight PlatformAI | 8/4/2024 | 17/6/2026 | A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited. | |
| Modificada | Media (5.4) | 0.38% | — | Microfocus Arcsight Management Center | 9/12/2023 | 17/6/2026 | A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS). | |
| Modificada | Alta (8.8) | 0.48% | — | Microfocus Arcsight Management Center | 11/8/2023 | 17/6/2026 | A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited. | |
| Modificada | Alta (7.5) | 1.0% | — | Microfocus Arcsight Management Center | 19/8/2020 | 17/6/2026 | Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service. | |
| Modificada | Media (4.3) | 0.68% | — | Microfocus Arcsight Management Center | 16/6/2020 | 17/6/2026 | Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure. | |
| Modificada | Media (4.3) | 0.68% | — | Microfocus Arcsight Management Center | 16/6/2020 | 17/6/2026 | Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure. | |
| Modificada | Media (5.4) | 0.51% | — | Microfocus Arcsight Management Center | 16/6/2020 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure. | |
| Modificada | Media (6.1) | 0.97% | — | HP Arcsight Management Center | 25/7/2019 | 17/6/2026 | Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1 | |
| Modificada | Alta (7.5) | 2.5% | — | HP Arcsight Management Center | 20/9/2018 | 17/6/2026 | A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads. | |
| Modificada | Alta (8.8) | 0.57% | — | Microfocus Arcsight Management Center | 20/9/2018 | 17/6/2026 | A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF). | |
| Modificada | Media (6.5) | 1.1% | — | HP Arcsight Management Center | 20/9/2018 | 17/6/2026 | A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls. | |
| Modificada | Media (6.1) | 1.3% | — | HP Arcsight Management Center | 20/9/2018 | 17/6/2026 | A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS). | |
| Modificada | Media (6.5) | 0.83% | — | HP Arcsight Management Center | 20/9/2018 | 17/6/2026 | Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls. | |
| Modificada | Alta (7.5) | 4.0% | — | HP Arcsight Management Center | 20/9/2018 | 17/6/2026 | A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal. | |
| Modificada | Alta (7.2) | 0.61% | — | HP Arcsight Connector ApplianceHP Arcsight LoggerHP Arcsight Command CenterHP Arcsight Connectors+3 | 4/11/2015 | 17/6/2026 | HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access. |