Unscored severity · published May 7, 2013
CVE-2013-0933
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Archer Egrc · Emc
5.0; 5.1; 5.2; 5.3 · source: NVD
RA
Rsa Archer Smartsuite · Emc
4.3; 4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0933
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0933
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-05/0023.html
More from Rsa Archer Egrc
8.8
CVE-2017-4998
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a cross-site request forgery vulnerability
6.5
CVE-2017-4999
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages
6.3
CVE-2016-0899
EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS…
6.1
CVE-2017-5002
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability
4.3
CVE-2017-5001
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability