CVEvulnerability
CVE-2020-11851
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-11-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.
Affected configurations
• microfocus arcsight logger (< 7.1.1)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600 community.microfocus.com
- https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600 community.microfocus.com