{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-07-15T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc"}, "references": [{"name": "arcsight-connector-xss(68569)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68569"}, {"name": "48694", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/48694"}, {"name": "VU#122054", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/122054"}, {"name": "1025791", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1025791"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cert@cert.org", "ID": "CVE-2011-0770", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "arcsight-connector-xss(68569)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68569"}, {"name": "48694", "refsource": "BID", "url": "http://www.securityfocus.com/bid/48694"}, {"name": "VU#122054", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/122054"}, {"name": "1025791", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1025791"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:05:53.744Z"}, "title": "CVE Program Container", "references": [{"name": "arcsight-connector-xss(68569)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68569"}, {"name": "48694", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/48694"}, {"name": "VU#122054", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/122054"}, {"name": "1025791", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1025791"}]}]}, "cveMetadata": {"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2011-0770", "datePublished": "2011-07-19T20:00:00", "dateReserved": "2011-02-03T00:00:00", "dateUpdated": "2024-08-06T22:05:53.744Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:windows_event_log_smartconnector:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D8340CA-3B24-4711-B85A-38F73F0DB5A6", "versionEndIncluding": "6.0.0.60023.2", "vulnerable": true}, {"criteria": "cpe:2.3:h:hp:arcsight_c1000_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "A2ED4F23-4DDE-4D2A-932D-83FD93E86CCD", "vulnerable": true}, {"criteria": "cpe:2.3:h:hp:arcsight_c1300_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D9DFBB3-7E4A-40EC-8943-5D6D9489DE42", "vulnerable": true}, {"criteria": "cpe:2.3:h:hp:arcsight_c3200_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "53379096-4B4E-4F86-8BE8-DAA902F4D5F2", "vulnerable": true}, {"criteria": "cpe:2.3:h:hp:arcsight_c3400_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "7FB0EE4D-5E80-4625-893B-5C53E692337F", "vulnerable": true}, {"criteria": "cpe:2.3:h:hp:arcsight_c5200_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "D9865427-52CA-4B0F-AFDE-EAE9C46D0AAA", "vulnerable": true}, {"criteria": "cpe:2.3:h:hp:arcsight_c5400_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "D02D9B67-9E0A-4B2A-A880-09DCA9622E85", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Windows Event Log SmartConnector de HP ArcSight Connector Appliance en versiones anteriores a la 6.1. Permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de la variable \"Windows XP\" en un fichero."}], "id": "CVE-2011-0770", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2011-07-19T20:55:00.897", "references": [{"source": "cret@cert.org", "url": "http://securitytracker.com/id?1025791"}, {"source": "cret@cert.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/122054"}, {"source": "cret@cert.org", "url": "http://www.securityfocus.com/bid/48694"}, {"source": "cret@cert.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68569"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1025791"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/122054"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/48694"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68569"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}