Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6468 State: PUBLISHED Published: 2018-02-06T14:00:00 Last Updated: 2024-08-05T06:01:49.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_id parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AntsKnows/CVE/blob/master/WP_Plugin_Flickr-rss
CVE ID: CVE-2018-6469 State: PUBLISHED Published: 2018-02-06T14:00:00 Last Updated: 2024-08-05T06:01:49.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_tags parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AntsKnows/CVE/blob/master/WP_Plugin_Flickr-rss
CVE ID: CVE-2018-6470 State: PUBLISHED Published: 2018-02-01T13:00:00 Last Updated: 2024-08-05T06:01:49.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dignajar/nibbleblog/issues/120
CVE ID: CVE-2018-6471 State: PUBLISHED Published: 2018-01-31T19:00:00Z Last Updated: 2024-09-16T17:17:51.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/SUPERAntiSpyware_POC/tree/master/0x9C402078
CVE ID: CVE-2018-6472 State: PUBLISHED Published: 2018-01-31T19:00:00Z Last Updated: 2024-09-17T01:20:32.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/SUPERAntiSpyware_POC/tree/master/0x9C40204c
CVE ID: CVE-2018-6473 State: PUBLISHED Published: 2018-01-31T19:00:00Z Last Updated: 2024-09-16T23:20:48.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/SUPERAntiSpyware_POC/tree/master/0x9C402080
CVE ID: CVE-2018-6474 State: PUBLISHED Published: 2018-01-31T19:00:00Z Last Updated: 2024-09-16T19:25:11.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/SUPERAntiSpyware_POC/tree/master/0x9C402148
CVE ID: CVE-2018-6475 State: PUBLISHED Published: 2018-01-31T19:00:00Z Last Updated: 2024-09-16T23:56:20.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/SUPERAntiSpyware_POC/tree/master/getshell
CVE ID: CVE-2018-6476 State: PUBLISHED Published: 2018-01-31T19:00:00Z Last Updated: 2024-09-17T01:41:20.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating input values from IOCtl 0x9C402114 or 0x9C402124 or 0x9C40207c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/SUPERAntiSpyware_POC/tree/master/0x9C402114_9C402124_9C40207c
CVE ID: CVE-2018-6479 State: PUBLISHED Published: 2018-01-31T20:00:00Z Last Updated: 2024-09-16T16:58:27.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to the / URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dreadlocked/netwave-dosvulnerability
CVE ID: CVE-2018-6480 State: PUBLISHED Published: 2018-01-31T20:00:00Z Last Updated: 2024-09-17T01:25:53.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for example, helped with loop prevention). ccnl_fwd_handleInterest assumes that the union member s is of type ccnl_pktdetail_ndntlv_s. However, if the type is in fact struct ccnl_pktdetail_ccntlv_s or struct ccnl_pktdetail_iottlv_s, the memory at that point is either uninitialised or points to data that is not a nonce, which renders the code using the local variable nonce pointless. A later nonc
sed or points to data that is not a nonce, which renders the code using the local variable nonce pointless. A later nonce check is insufficient. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cn-uofbasel/ccn-lite/issues/159
CVE ID: CVE-2018-6481 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:01:49.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/DanielRTeixeira/5af55e62340e4df38e0c411eb0cc3dca - https://www.exploit-db.com/exploits/44156/ - https://www.youtube.com/watch?v=Ed7QXICSgeY - http://packetstormsecurity.com/files/146541/Disk-Savvy-Enterprise-10.4.18-Buffer-Overflow.html
CVE ID: CVE-2018-6484 State: PUBLISHED Published: 2018-02-01T05:00:00 Last Updated: 2024-08-05T06:01:49.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdraheim/zziplib/issues/14 - https://usn.ubuntu.com/3699-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-6485 State: PUBLISHED Published: 2018-02-01T14:00:00 Last Updated: 2024-08-05T06:01:49.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22343 - http://www.securityfocus.com/bid/102912 - http://bugs.debian.org/878159 - https://access.redhat.com/errata/RHSA-2018:3092 - https://security.net
.com/bid/102912 - http://bugs.debian.org/878159 - https://access.redhat.com/errata/RHSA-2018:3092 - https://security.netapp.com/advisory/ntap-20190404-0003/ - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHBA-2019:0327 - https://usn.ubuntu.com/4218-1/ - https://usn.ubuntu.com/4416-1/
CVE ID: CVE-2018-6486 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T16:28:00.284Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Micro Focus Products: Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC) Problem Types: XML External Entity (XXE) Description: XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
nal Entity (XXE) injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102902 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03083653
CVE ID: CVE-2018-6487 State: PUBLISHED Published: 2018-02-20T21:00:00Z Last Updated: 2024-09-17T03:47:56.039Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Universal CMDB Foundation Software Problem Types: Remote Disclosure of Information Description: Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091
: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097
CVE ID: CVE-2018-6488 State: PUBLISHED Published: 2018-02-22T22:00:00Z Last Updated: 2024-09-17T04:20:29.356Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Micro Focus Universal CMDB Problem Types: Arbitrary Code Execution Description: Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019
CVE ID: CVE-2018-6489 State: PUBLISHED Published: 2018-02-22T22:00:00 Last Updated: 2024-08-05T06:01:49.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity (XXE) Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426
CVE ID: CVE-2018-6490 State: PUBLISHED Published: 2018-03-02T01:00:00Z Last Updated: 2024-09-17T02:41:41.351Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Micro Focus Products: Operations Orchestration Software Problem Types: Denial of Service (DoS) Description: Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03103896 - https://www.tenable.com/security/research/tra-2018-05
CVE ID: CVE-2018-6491 State: PUBLISHED Published: 2018-04-23T21:00:00 Last Updated: 2024-08-05T06:01:49.261Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Universal CMDB Problem Types: Local Escalation of Privilege Description: Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040680 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180
CVE ID: CVE-2018-6492 State: PUBLISHED Published: 2018-05-22T19:00:00Z Last Updated: 2024-09-16T23:40:49.607Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Micro Focus Products: Network Operations Management Ultimate, Network Automation Problem Types: Remote Cross-Site Scripting (XSS), non-persistent HTML Injection Description: Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persis
0, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158014 - http://www.securitytracker.com/id/1040900 - http://www.securityfocus.com/bid/104131
CVE ID: CVE-2018-6493 State: PUBLISHED Published: 2018-05-22T19:00:00Z Last Updated: 2024-09-17T04:25:37.164Z Severity: HIGH (CVSS 8.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Micro Focus Products: Network Operations Management Ultimate, Network Automation Problem Types: SQL Injection Description: SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/doc
Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158014 - http://www.securitytracker.com/id/1040900 - http://www.securityfocus.com/bid/104131
CVE ID: CVE-2018-6494 State: PUBLISHED Published: 2018-05-22T18:00:00Z Last Updated: 2024-09-16T23:16:03.670Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Micro Focus Products: HP Service Manager Software Problem Types: Remote SQL Injection Description: Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158656 - http://www.securityfocus.com/bid/104141 - http://www.securitytracker.com/id
document/-/facetsearch/document/KM03158656 - http://www.securityfocus.com/bid/104141 - http://www.securitytracker.com/id/1040902
CVE ID: CVE-2018-6495 State: PUBLISHED Published: 2018-05-23T18:00:00Z Last Updated: 2024-09-16T17:14:33.396Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N) Vendors: Micro Focus Products: UCMDB, CMS Server 2018.05, UCMDB Browser Problem Types: Cross-Site Scripting (XSS) Description: Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: Referen
ld be remotely exploited to allow Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040970 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778
CVE ID: CVE-2018-6496 State: PUBLISHED Published: 2018-06-15T21:00:00 Last Updated: 2024-08-05T06:01:49.082Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: UCMDB Browser Problem Types: cross-site request forgery (CSRF) Description: Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104483 - http://www.securitytracker.com/id/1041139 - https://softwaresupport.software
- http://www.securityfocus.com/bid/104483 - http://www.securitytracker.com/id/1041139 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03180066
CVE ID: CVE-2018-6497 State: PUBLISHED Published: 2018-06-15T21:00:00 Last Updated: 2024-08-05T06:01:49.273Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Universal CMDB Server, CMS Server Problem Types: cross-site request forgery (CSRF) Description: Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - htt
erialization and cross-site request forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03180069 - http://www.securitytracker.com/id/1041140
CVE ID: CVE-2018-6498 State: PUBLISHED Published: 2018-08-30T21:00:00Z Last Updated: 2024-09-17T01:11:00.440Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: Micro Focus Products: Network Operations Management (NOM) Suite CDF, Service Management Automation Suite, Data Center Automation Containerized Suite, Operations Bridge Containerized Suite, Hybrid Cloud Management Containerized Suite Problem Types: Remote Code Execution Description: Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containeriz
2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236667 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236669 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236725 - https://softwaresupport.softwaregrp.com/document/-/facet
rt.softwaregrp.com/document/-/facetsearch/document/KM03236725 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236632 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236678
CVE ID: CVE-2018-6499 State: PUBLISHED Published: 2018-08-30T21:00:00Z Last Updated: 2024-09-17T04:19:15.400Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H) Vendors: Micro Focus Products: Network Operations Management (NOM) Suite CDF, Service Management Automation Suite, Data Center Automation Containerized Suite, Operations Bridge Containerized Suite, Hybrid Cloud Management Containerized Suite, Network Virtualization (NV) with floating licenses, Unified Functional Testing (UFT) with floating licenses, Service Virtualization (SV) with floating licenses Problem Types: Remote Code Execution Description: Remote Code Execution in the following products Hybrid Cloud Manag
ses Problem Types: Remote Code Execution Description: Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05, Service Virtualization (SV) with floating licenses using Any version using APLS older than 10.7, Unified Functional Testing (UFT) with floating licenses using Any version using APLS older than 10.7, Network Virtualization (NV) with floating licenses using Any version using APLS older than 10.7 and Network Operations Manage
rk Virtualization (NV) with floating licenses using Any version using APLS older than 10.7 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236722 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236667 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236669 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236648 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236632?lang=en&cc=
rch/document/KM03236648 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236632?lang=en&cc=us&hpappid=206728_SSO_PRO - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03236726
CVE ID: CVE-2018-6500 State: PUBLISHED Published: 2018-09-20T16:00:00Z Last Updated: 2024-09-16T23:42:22.758Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: ArcSight Management Center Problem Types: Directory Traversal Description: A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142
CVE ID: CVE-2018-6501 State: PUBLISHED Published: 2018-09-20T16:00:00 Last Updated: 2024-08-05T06:10:10.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142
CVE ID: CVE-2018-6502 State: PUBLISHED Published: 2018-09-20T19:00:00Z Last Updated: 2024-09-17T04:19:28.690Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Micro Focus Products: ArcSight Management Center Problem Types: Reflected Cross-Site Scripting (XSS) Description: A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245
: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142