Medium severity6.1NVD Advisory· Published Nov 17, 2020· Updated Jun 17, 2026

CVE-2020-11860

Description

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS)

Affected products

Microfocus/OpenText ArcSight Loggercpe-rescue
Range: All version prior to version 7.1.1
Microfocus/ArcSight Logger2 versions
cpe:2.3:a:microfocus:arcsight_logger:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microfocus:arcsight_logger:*:*:*:*:*:*:*:*range: <7.1.1
- (no CPE)range: <7.1.1

Patches

Vulnerability mechanics

References

community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000