CVE-2020-11838

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-16 · updated 2026-06-17
Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

Affected products

ArcSight Management Center.: from 2.7.0 before 2.9.4; 2.6.1 — fixed in 2.9.4

How to fix

Upgrade to a fixed version: ArcSight Management Center. 2.9.4. Check the vendor advisory for mitigations.

References

https://softwaresupport.softwaregrp.com/doc/KM03650893
https://softwaresupport.softwaregrp.com/doc/KM03650893

Get alerted when CVE-2020-11838 or the next vulnerability affects your stack