by Kastro
Paper/Archive/CVE-2020-11851

CVE-2020-11851

Micro Focus ArcSight Logger — Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 87.2.872 × 2017.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.

Affected

ProductAffectedFixed inSource
ArcSight LoggerAll version prior to version 7.1.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcommunity.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600