Login Request a demo
Critical severity · published Nov 17, 2020
CVE-2020-11851
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1
9.8
CVSS
2.9%
EPSS
No
On KEV
Description
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Arcsight Logger · Microfocus
before 7.1.1 · source: NVD
Affected product
AL
Arcsight Logger
Microfocus
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11851
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11851
community.microfocus.com
https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600
More from Arcsight Logger
9.1
CVE-2023-24470
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0
8.8
CVE-2019-11657
Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0
7.5
CVE-2022-26330
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger
6.1
CVE-2023-24469
Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
6.1
CVE-2022-26331
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger