CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

305 matches found

Kitploit•added 2026/09/09 11:38 a.m.•5 views

CVE-2025-27893

CVE-2025-27893: Archer Platform의 가정된 불변 웹 매개변수 외부 제어 설명 Archer Platform 6부터 6.14.00202.10024까지에서, 레코드 생성 권한이 있는 인증된 사용자는 GenericContent/Record.aspx?id= URI를 통한 Copy 요청을 가로채고 수정하여 생성 날짜와 같은 불변 필드를 조작할 수 있습니다. 이로 인해 시스템 생성 메타데이터의 무단 수정이 가능해지며, 데이터 무결성이 손상되고 감사, 규정 준수 및 보안 통제에 영향을 미칠 수 있습니다. 영향을 받는 ...

4.3CVSS5.9AI score0.00392EPSS

SaveExploits1

RedhatCVE•added 2026/01/09 9:36 a.m.•14 views

CVE-2024-34092

An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 6.14.0.3 is also a fixed release...

8.8CVSS7AI score0.00389EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 9:13 a.m.•19 views

CVE-2022-37316

Archer Platform 6.8 before 6.11 P3 6.11.0.3 contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 6.10.0.3.1 is also a fixed release...

6.5CVSS6.7AI score0.00686EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:35 a.m.•15 views

CVE-2024-34091

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

7.3CVSS5.2AI score0.00505EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•24 views

CVE-2024-41705

A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the...

7.1CVSS5.5AI score0.00294EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•20 views

CVE-2024-41706

A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers...

7.3CVSS5.6AI score0.00327EPSS

SaveExploits0References1