| Package | Affected versions | Patched versions |
|---|---|---|
| arcsight enterprise security manager | = 6.0= 6.0c= 6.11.0= 6.5= 6.5c= 6.8= 6.8c= 6.9.0c= 6.9.1c | |
| arcsight enterprise security manager express | = 6.0= 6.0c= 6.11.0= 6.5= 6.5c= 6.8= 6.8c= 6.9.0= 6.9.0c= 6.9.1c |
A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free