CVE-2019-3485: ArcSight Logger stored cross site script issue in version prior to 6.7.1

Security readout for executives and security teams

CVE-2019-3485 is a stored cross-site scripting issue in Micro Focus ArcSight Logger before 6.7.1. An attacker on an adjacent network could cause a user to interact with malicious stored content, potentially exposing limited information or affecting integrity in that user’s browser context. Exposure is most relevant where ArcSight Logger web interfaces are reachable from adjacent or weakly segmented networks. Security operations teams using older Logger versions should treat this as a management-plane hygiene issue. Address in the normal vulnerability remediation cycle, faster for exposed or high-privilege Logger deployments. This is not supported as an emergency zero-day from the supplied evidence. Mitigation focus: Upgrade ArcSight Logger to 6.7.1 or a later vendor-supported release.; Review Micro Focus release notes and vendor guidance before maintenance.; Restrict Logger web access to trusted admin networks or VPN paths..

Prepared

Jun 1, 2026, 12:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.