Vulnerabilities > Microfocus > Arcsight Logger > 7.2.2

DATE CVE VULNERABILITY TITLE RISK
2023-06-13 CVE-2023-24470 XXE vulnerability in Microfocus Arcsight Logger
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
network
low complexity
microfocus CWE-611
critical
 9.1
9.1
2023-06-13 CVE-2023-24469 Cross-site Scripting vulnerability in Microfocus Arcsight Logger
Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
network
low complexity
microfocus CWE-79
6.1
6.1