SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-38127

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x.

MEDIUM 6.1EPSS 0.57%

Does this matter?

Lower severity and a low EPSS score (0.57%). Track it; it rarely justifies an emergency change on its own.

Description

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).

CVSS 3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.57% probability · 45th percentile
CISA KEV
Not listed
Weakness
CWE-79
Affected
microfocus/arcsight enterprise security manager
Source
security@opentext.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.