8.7
High
CVE-2024-2834 A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and…
Description
A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ArcSight Management Center 3.2 | 3.2.3 → latest | No fix stated |
| ArcSight Platform 24.1 | 24.1.0 → < 24.1.2 | 24.1.2 |
| ArcSight Platform 23.3 | earliest → < 23.3.2 | 23.3.2 |
| arcsight_management_center 3.2 | earliest → < 3.2.3P1 | 3.2.2P1 |