Lucene search

[email protected]CVE-2014-0639

HistoryMay 25, 2014 - 10:55 p.m.

CVE-2014-0639

2014-05-2522:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-0639

cross-site scripting

xss

emc rsa archer

grc 5.4 sp1

security vulnerability

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
emc:rsa_archer_egrcemc rsa archer egrceq5.2
emc:rsa_archer_egrcemc rsa archer egrceq5.0
emc:rsa_archer_egrcemc rsa archer egrceq5.3
emc:rsa_archer_egrcemc rsa archer egrceq5.1
emc:rsa_archer_egrcemc rsa archer egrceq5.4

CPE	Name	Operator	Version
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.2
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.0
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.3
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.1
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.4

References

archives.neohapsis.com/archives/bugtraq/2014-05/0134.html

packetstormsecurity.com/files/126788/RSA-Archer-GRC-Cross-Site-Scripting.html

www.securityfocus.com/bid/67602

www.securitytracker.com/id/1030281

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

Related for CVE-2014-0639

securityvulns2 prion1