CVE-2014-4633

CVE-2014-4633 is a persistent Cross-Site Scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x, exploitable in versions prior to 5.5.1.1. The issue could allow an attacker to execute arbitrary HTML/script in a user’s browser session within the affected RSA Archer application. The ESA-2...

CVE-2014-4633

Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

EMC RSA Archer multiple security vulnerabilities

CSRF, Pribilege escalation, unauthorized access...

ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities

ESA-2014-071.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2014-071 CVE Identifier: CVE-2014-2517, CVE-2014-2505, CVE-2014-0640, CVE-2014-0641 Severity Rating: CVSS v2 Base Score: See below for individual scor...

CVE-2014-0640

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors...

CVE-2014-2505

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

CVE-2014-2517

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-0641

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

Design/Logic Flaw

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors...

Code injection

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

Code injection

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2517

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-0640

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors...

CVE-2014-2505

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

CVE-2014-0641

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-2517

Summary: CVE-2014-2517 is a privilege escalation vulnerability affecting EMC RSA Archer GRC Platform 5.x. Connected advisory ESA-2014-071 confirms a vulnerability in RSA Archer GRC Platform 5.5 SP1 timeframe where malicious non-privileged users could perform unauthorized operations within the app...

CVE-2014-2505

RSA Archer GRC Platform 5.x prior to 5.5 SP1 is affected by CVE-2014-2505, which allows an attacker to cause the application to download code from an untrusted control sphere, potentially changing functionality. The linked advisory (ESA-2014-071) confirms the vulnerability as one of several in RS...

CVE-2014-0640

CVE-2014-0640 affects EMC RSA Archer GRC Platform 5.x, prior to 5.5 SP1, where remote authenticated users can bypass resource-access restrictions via unspecified vectors. The RSA advisory ESA-2014-071 confirms this vulnerability within the 5.5 SP1 fixes bundle for RSA Archer GRC Platform 5.x. Imp...

CVE-2014-0641

The CVE-2014-0641 issue affects EMC RSA Archer GRC Platform 5.x (up to 5.5 SP1). It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow a remote attacker to hijack an authenticated user’s session in the victim’s browser by enticing the user to click crafted links or similar acti...