What’s Vulnerable › Vulnerabilities

CVE-2011-0770

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-07-19 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.

Affected products

• HP Arcsight C1000 Appliance: all versions
• HP Arcsight C1300 Appliance: all versions
• HP Arcsight C3200 Appliance: all versions
• HP Arcsight C3400 Appliance: all versions
• HP Arcsight C5200 Appliance: all versions
• HP Arcsight C5400 Appliance: all versions
• HP Windows Event Log Smartconnector: through 6.0.0.60023.2

References

• http://securitytracker.com/id?1025791
• http://www.kb.cert.org/vuls/id/122054
• http://www.securityfocus.com/bid/48694
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68569
• http://securitytracker.com/id?1025791
• http://www.kb.cert.org/vuls/id/122054
• http://www.securityfocus.com/bid/48694
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68569

Get alerted when CVE-2011-0770 or the next vulnerability affects your stack