AR
Product
Archer
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 26Low 0
Watch
Add Archer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-37316 | 6.5 | Aug 25 | Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata… Affected: 6.8 before 6.10.0.3.1; 6.11 before 6.11.0.3 |
| CVE-2022-30585 | 6.5 | May 26 | The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) contains an Authorization Bypass Vulnerability Affected: 6.3 before 6.9.3.4; 6.10.0.0 before 6.10.0.3 |
| CVE-2021-38362 | 6.5 | Mar 30 | In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference… Affected: 6.1.0.0 before 6.9.3.0.1 |
| CVE-2022-26949 | 6.5 | Mar 30 | Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments Affected: 6.1.0.0 before 6.9.2.2 |
| CVE-2021-41594 | 6.5 | Mar 30 | In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by intercepting the API request at the… Affected: 6.1.0.0 before 6.9.3.3 |
| CVE-2019-3756 | 6.5 | Sep 18 | RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability Affected: before 6.6.0.3 |
| CVE-2022-37318 | 6.1 | Aug 25 | Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability Affected: 6.9.2.2 before 6.10.0.4; 6.11 before 6.11.0.2.4 |
| CVE-2022-26951 | 6.1 | Mar 30 | Archer 6.x through 6.10 (6.10.0.0) contains a reflected XSS vulnerability Affected: 6.1.0.0 before 6.10.0.1 |
| CVE-2022-26950 | 6.1 | Mar 30 | Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability Affected: 6.1.0.0 before 6.9.0.3 |
| CVE-2020-26884 | 6.1 | Nov 18 | RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability Affected: 6.8 through 6.8.0.3; 6.9 |
| CVE-2020-5337 | 6.1 | May 4 | RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability Affected: before 6.7.0.1 |
| CVE-2020-5336 | 6.1 | May 4 | RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability Affected: before 6.7.0.1 |
| CVE-2020-5334 | 6.1 | May 4 | RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability Affected: before 6.7.0.2 |
| CVE-2021-29253 | 5.5 | May 26 | The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability Affected: 6.4 before 6.6.0.8; 6.7 before 6.7.0.8; 6.8 before 6.8.0.5; 6.9 before 6.9.0.2 |
| CVE-2020-5331 | 5.5 | May 4 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability Affected: before 6.7.0.3 |
| CVE-2022-37317 | 5.4 | Aug 25 | Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability Affected: 6.0 before 6.10.0.4; 6.11 before 6.11.0.2.4 |
| CVE-2021-33616 | 5.4 | Apr 4 | RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS Affected: 6.1.0.0 through 6.9.1.4 |
| CVE-2022-26947 | 5.4 | Mar 30 | Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability Affected: 6.1.0.0 before 6.9.3.1 |
| CVE-2021-29252 | 5.4 | May 26 | RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability Affected: 6.6 before 6.6.0.8; 6.7 before 6.7.0.8; 6.8 before 6.8.0.5; 6.9 before 6.9.1.1 |
| CVE-2020-29537 | 5.4 | Jan 29 | Archer before 6.8 P2 (6.8.0.2) is affected by an open redirect vulnerability Affected: 6.6 before 6.6.0.8; 6.7 before 6.7.0.8; 6.8 before 6.8.0.2 |
| CVE-2020-29535 | 5.4 | Jan 29 | Archer before 6.8 P4 (6.8.0.4) contains a stored XSS vulnerability Affected: 6.6 before 6.6.0.8; 6.7 before 6.7.0.8; 6.8 before 6.8.0.5; 6.9 before 6.9.0.1 |
| CVE-2018-11059 | 5.4 | Jul 24 | RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability Affected: 6.1.0.0 before 6.1.0.3; 6.2.0.0 before 6.2.0.10; 6.3.0.0 before 6.3.0.7; 6.4.0.0 |
| CVE-2020-29538 | 4.9 | Jan 29 | Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API Affected: 6.6 before 6.6.0.8; 6.7 before 6.7.0.8; 6.8 before 6.8.0.5; 6.9 before 6.9.0.1 |
| CVE-2020-29536 | 4.3 | Jan 29 | Archer before 6.8 P2 (6.8.0.2) is affected by a path exposure vulnerability Affected: 6.6 before 6.6.0.8; 6.7 before 6.7.0.8; 6.8 before 6.8.0.2 |
| CVE-2020-5333 | 4.3 | May 4 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API Affected: before 6.7.0.3 |
| CVE-2018-11065 | 4.3 | Aug 24 | The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability Affected: 6.1.0.0 before 6.1.0.3; 6.2.0.0 before 6.2.0.10; 6.3.0.0 before 6.3.0.7; 6.4.0.0 before 6.4.0.1 |
Showing 26