← back
CVE-2017-14358

CVE-2017-14358

EPSS 1.2%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
31 Oct 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site.
Affected products
Micro Focus · HP ArcSight ESMMicro Focus · HP ArcSight ESM Express

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://softwaresupport.hpe.com/km/KM02996760https://www.auscert.org.au/bulletins/54166