What’s Vulnerable › Vulnerabilities

CVE-2020-9522

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-16 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

Affected products

• Microfocus Arcsight Enterprise Security Manager Express: from 7.0.0 through 7.2.1

References

• https://softwaresupport.softwaregrp.com/doc/KM03650888
• https://softwaresupport.softwaregrp.com/doc/KM03650888

Get alerted when CVE-2020-9522 or the next vulnerability affects your stack