CVE-2023-32759

CVE-2023-32759 (Archer Platform) : The affected product is Archer Platform, prior to version 6.13. The issue allows an authenticated attacker to obtain sensitive information through a crafted URL. The root cause is not detailed in the provided documents beyond this exposure path. A fixed version ...

Archer Platform 日志信息泄露漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in versions of Archer Platform prior to v.6.13 that stems from sensitive information that can be accessed via log files...

CVE-2023-32760

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication...

CVE-2023-37224

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files...

CVE-2023-32761

CVE-2023-32761 is a CSRF vulnerability in Archer Platform prior to version 6.13. An authenticated attacker can execute arbitrary code via a crafted request. The issue is fixed in Archer Platform versions 6.12.0.6 and 6.13.0. No exploitation details are provided beyond the authenticated vector; no...

CVE-2023-32761

Cross Site Request Forgery CSRF vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request...

CVE-2023-37223

Cross Site Scripting XSS vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script...

CVE-2023-32760

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in versions of Archer Platform prior to 6.13 that stems from a vulnerability that allows an authenticated attacker to obtain sensitive information via a crafted URL...

PT-2023-25843 · Unknown · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Description: The issue allows an authenticated attacker to obtain sensitive information via the log files. Recommendations: For versions prior to 6.12.0.6, update to version 6.12.0.6 or later. For versio...

PT-2023-25842 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6 Description: The issue is a Cross Site Scripting XSS vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script...

CVE-2023-32761

Cross Site Request Forgery CSRF vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request...

Archer Platform 跨站脚本漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 6.13 that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability. An attacker can exploit this vulnerability to execute...

CVE-2023-37224

Archer Platform has a vulnerability (CVE-2023-37224) causing information disclosure via log files in versions prior to 6.13. It is fixed in 6.12.0.6 and 6.13.0. Upgrade to 6.12.0.6 or later (6.13.0 or newer) to remediate. The advisory does not specify exploitation details beyond authenticated acc...

PT-2023-24007 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6 Description: The issue allows an authenticated attacker to obtain sensitive information via a crafted URL. Recommendations: For Archer Platform versions prior to 6.13,...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

Cross site scripting

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

PT-2023-22832 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 6.8 through 6.12 P6 before HF1 6.12.0.6.1 Description: The issue allows a remote authenticated malicious user to potentially exploit a stored XSS vulnerability, storing malicious HTML or JavaScript code in a trusted...

CVE-2023-30639

Archer Platform is affected by a stored XSS vulnerability (CVE-2023-30639) in versions 6.8 through 6.12 P6 before HF1 (6.12.0.6.1). A remote authenticated Archer user could store malicious HTML/JavaScript in a trusted data store, which would be executed by other users’ browsers in the context of ...