Unscored severity · published Aug 8, 2012
CVE-2012-2960
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Arcsight Connector Appliance · HP
c1400; c3400; c5400 · source: NVD
AC
Arcsight Connector Appliance Firmware · HP
6.0.0.60023.2; 6.2.0.6244.0 · source: NVD
AL
Arcsight Logger Appliance · HP
l7400-san · source: NVD
AL
Arcsight Logger Appliance Firmware · HP
5.2.0.6288.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2960
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2960
h20565.www2.hp.com
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700
US Government Resource
http://www.kb.cert.org/vuls/id/960468
More from Arcsight Connector Appliance
–
CVE-2015-6030
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight…
–
CVE-2012-5199
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via…
–
CVE-2012-5198
Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown…
–
CVE-2012-3286
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information,…