2041 matches found
CVE-2024-26309
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...
CVE-2024-26313
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data...
Cross site scripting
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data...
Information disclosure
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...
CVE-2024-26313
Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored Cross-Site Scripting (XSS) vulnerability. A remote authenticated Archer user could store malicious HTML/JavaScript in a trusted data store, causing victim users’ browsers to execute code in the context of the vulnerable applica...
Archer Platform Security Vulnerability
Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform version 6.x prior to 6.14 P2 HF2 6.14.0.2.2, which stems from the presence of a sensitive information disclosure vulnerability, whereby an unauthenticated attacker...
Archer Platform Security Vulnerability
Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability in Archer Platform version 6.x prior to 6.14 P2 HF2 6.14.0.2.2 stems from the presence of a stored Cross-Site Scripting XSS vulnerability that could allow a remotely authenticated attacker t...
CVE-2024-26309
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...
CVE-2024-26313
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data...
CVE-2024-26309
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...
CVE-2024-26309
CVE-2024-26309 affects Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2). An unauthenticated attacker could disclose sensitive information via an internal URL due to a vulnerability in Archer Platform. Impact is described as information disclosure; attack vector is network with no privileges re...
PT-2024-21344 · Rsa · Archer Platform
Name of the Vulnerable Software and Affected Versions: Archer Platform versions 6.x before 6.14 P2 HF2 6.14.0.2.2 Description: The issue is related to sensitive information disclosure. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...
CVE-2024-2188
Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...
CVE-2024-2188
Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...
Cross site scripting
Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...
CVE-2024-2188 Cross-Site Scripting vulnerability in TP-Link Archer AX50
Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...
CVE-2024-2188
Summary: CVE-2024-2188 is a stored XSS in TP-Link Archer AX50 (firmware 1.0.11 build 2022052). An unauthenticated attacker can create a port-mapping rule via a SOAP request, storing a malicious JavaScript payload that executes when the rule loads. Affected product (from provided docs): TP-Link Ar...
CVE-2024-2188 Cross-Site Scripting vulnerability in TP-Link Archer AX50
Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...
CVE-2024-26310
Archer Platform 6.8 before 6.14 P2 6.14.0.2 contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges...
CVE-2024-26311
Archer Platform 6.x before 6.14 P2 HF1 6.14.0.2.1 contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then...