What’s Vulnerable › Vulnerabilities

CVE-2025-2517: Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager

• Severity: low (CVSS 2.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-21 · updated 2026-06-17
• Weakness: CWE-672

Description

Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.

Affected products

• OpenText ArcSight Enterprise Security Manager: through 7.6.6; from 7.7.0 through 7.7.1; from 7.8.0 through 7.8.1; from 24.1 through 25.1

References

• https://portal.microfocus.com/s/article/KM000040103

Get alerted when CVE-2025-2517 or the next vulnerability affects your stack