| Package | Affected versions | Patched versions |
|---|---|---|
| arcsight enterprise security manager | = 6.0= 6.0c= 6.11.0= 6.5= 6.5c= 6.8= 6.8c= 6.9.0c= 6.9.1c | |
| arcsight enterprise security manager express | = 6.0= 6.0c= 6.11.0= 6.5= 6.5c= 6.8= 6.8c= 6.9.0= 6.9.1c |
A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free