Medium severity6.1NVD Advisory· Published Nov 8, 2024· Updated Jun 17, 2026

CVE-2024-9841

Description

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.

Affected products

Opentext/ArcSight Platformcpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)
Opentext/ArcSight Management Centercpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)
Microfocus/Arcsight Management Center2 versions
cpe:2.3:a:microfocus:arcsight_management_center:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microfocus:arcsight_management_center:*:*:*:*:*:*:*:*range: <3.2.5
- cpe:2.3:a:microfocus:arcsight_management_center:3.2.5:-:*:*:*:*:*:*
Microfocus/Arcsight Platform
cpe:2.3:a:microfocus:arcsight_platform:*:*:*:*:*:*:*:*
Range: <24.2.2

Patches

Vulnerability mechanics

References

portal.microfocus.com/s/article/KM000035977nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000