Vulnerabilities > Microfocus > Arcsight Logger > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-06-13 CVE-2023-24470 XXE vulnerability in Microfocus Arcsight Logger
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
network
low complexity
microfocus CWE-611
critical
 9.1
9.1
2020-11-17 CVE-2020-11851 Code Injection vulnerability in Microfocus Arcsight Logger 6.61/7.0/7.0.1
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.
network
low complexity
microfocus CWE-94
critical
 9.8
9.8