Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-0770

Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.

Published

2011-07-19T20:55:00.897

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp windows_event_log_smartconnector ≤ 6.0.0.60023.2 Yes
Hardware hp arcsight_c1000_appliance * Yes
Hardware hp arcsight_c1300_appliance * Yes
Hardware hp arcsight_c3200_appliance * Yes
Hardware hp arcsight_c3400_appliance * Yes
Hardware hp arcsight_c5200_appliance * Yes
Hardware hp arcsight_c5400_appliance * Yes
References