The DB service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain sensitive administrator-account information via a. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
IBM
Lenovo
Authentication Bypass
Switch Center
System Networking Switch Center
NVD
CVSS 2.0
5.0
EPSS
0.2%
Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web script or HTML via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
XSS
HP
Archsight Management Center
Arcsight Logger
NVD
CVSS 2.0
4.3
EPSS
0.7%