CVE-2020-11841

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
n/aArcSight Management Center.2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4

References

Timeline

Published
Jun 16, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-118427.5Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (CVE-2020-118436.5This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or beforeCVE-2020-118449.8Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. CVE-2020-118456.1Cross Site Scripting vulnerability in Micro Focus Service Manager product. Affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The CVE-2020-118467.5A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set thatCVE-2020-118477.8SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects PrCVE-2020-118487.5Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability CVE-2020-118499.8Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1CVE-2020-11857.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker wCVE-2020-118506.1Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self SCVE-2020-118519.8Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability couldCVE-2020-118528.8DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to