9.1
Critical
CVE-2023-24470 Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0
Description
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ArcSight Logger | Versions not published |
Other CVEs of ArcSight Logger
The 8 CVEs of ArcSight Logger →
CVE-2023-24469
Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
6.1
Medium
CVE-2019-3484
Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7
Not rated
CVE-2019-3483
Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7
Not rated
CVE-2019-3482
Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7
Not rated