CVE-2014-4633

2014-12-1218:59:02

CWE-79

[email protected]

web.nvd.nist.gov

cve

2014

4633

cross-site scripting

xss

emc

rsa

archer

grc

platform

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

Cross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

emcrsa_archer_egrcMatch5.0

emcrsa_archer_egrcMatch5.1

emcrsa_archer_egrcMatch5.2

emcrsa_archer_egrcMatch5.3

emcrsa_archer_egrcMatch5.4

emcrsa_archer_egrcMatch5.5

emcrsa_archer_egrcMatch5.5.1

CPENameOperatorVersion
emc:rsa_archer_egrcemc rsa archer egrceq5.0
emc:rsa_archer_egrcemc rsa archer egrceq5.1
emc:rsa_archer_egrcemc rsa archer egrceq5.2
emc:rsa_archer_egrcemc rsa archer egrceq5.3
emc:rsa_archer_egrcemc rsa archer egrceq5.4
emc:rsa_archer_egrcemc rsa archer egrceq5.5
emc:rsa_archer_egrcemc rsa archer egrceq5.5.1

CPE	Name	Operator	Version
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.0
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.1
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.2
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.3
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.4
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.5
emc:rsa_archer_egrc	emc rsa archer egrc	eq	5.5.1