CVE-2020-11851

9.8 criticalEPSS 2.9%

Critical (9.8) in microfocus arcsight logger. EPSS 2.9% chance of exploitation in the next 30 days.

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2020-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:arcsight_logger

References

https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600
https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600

Check your stack JSON