ArcSight MC Remote Stored XSS Vulnerability CVE-2020-25835
CVE-2020-25835 Published on December 9, 2023

Micro Focus ArcSight Management Center Remote Vulnerability
A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS).

NVD

Vulnerability Analysis

CVE-2020-25835 can be exploited with network access, requires user interaction and user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
LOW

Products Associated with CVE-2020-25835

Want to know whenever a new CVE is published for Micro Focus Arcsight Management Center? stack.watch will email you.

Micro Focus Arcsight Management Center
 

Affected Versions

Micro Focus ArcSight Management Center:

Exploit Probability

EPSS
0.05%
Percentile
16.45%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.