EMC RSA Archer < 6.2.0.5 Multiple Vulnerabilities

The version of EMC RSA Archer running on the remote web server is prior to 6.2.0.5. It is, therefore, affected by multiple vulnerabilities. See advisory for details. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid103818; scriptversion"1.10";...

CVE-2017-14370

CVE-2017-14370 concerns RSA Archer GRC Platform versions prior to 6.2.0.5. The vulnerability is a stored cross-site scripting (XSS) via the Source Asset ID field, allowing an authenticated attacker to cause arbitrary HTML execution in a user’s browser session within the affected application. The ...