CVE-2012-2960: Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2...

Security readout for executives and security teams

This is an old cross-site scripting issue in HP ArcSight Connector and Logger appliances. A malicious imported file could cause script or HTML to run in the appliance web interface. For executives, the main concern is compromise of a security operations tool, but the bundle provides no CVSS score or active exploitation evidence. Exposure appears limited to organizations still running the named HP ArcSight appliance builds, especially where import functions are reachable by untrusted or lower-trust users. Modern, patched, or decommissioned ArcSight deployments may not be affected, but the bundle does not identify replacement versions. Prioritize this if legacy ArcSight appliances remain in production, because security monitoring systems are sensitive administrative assets. If those exact builds are absent or isolated, urgency is lower. The key executive action is to confirm inventory and vendor-supported remediation status. Mitigation focus: Inventory ArcSight Connector and Logger appliances and record exact versions.; Review HP advisory HPSBMU02836 for vendor-confirmed fixes or workarounds.; Restrict import functionality to trusted administrative users only..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.