Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.
Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 111311 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2011-0770
CVSS 2.0 · 4.3 Medium
EPSS 3.5%
KEV · Not listed
Vendors
Products
CVE-2011-2779
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.
CVSS 2.0 · 3.6 Low
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.