Hewlett Packard · Arcsight Management Center · CVE-2015-5441
**Name of the Vulnerable Software and Affected Versions**
HP ArcSight Management Center versions prior to 2.1
HP ArcSight Logger versions prior to 6.1
**Description**
The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting (XSS) attacks.
**Recommendations**
For HP ArcSight Management Center versions prior to 2.1, update to version 2.1 or later.
For HP ArcSight Logger versions prior to 6.1, update to version 6.1 or later.