CVE-2014-0641

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

Code injection

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

CVE-2014-0640

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors...

CVE-2014-2505

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

CVE-2014-2517

Summary: CVE-2014-2517 is a privilege escalation vulnerability affecting EMC RSA Archer GRC Platform 5.x. Connected advisory ESA-2014-071 confirms a vulnerability in RSA Archer GRC Platform 5.5 SP1 timeframe where malicious non-privileged users could perform unauthorized operations within the app...

CVE-2014-2517

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2505

RSA Archer GRC Platform 5.x prior to 5.5 SP1 is affected by CVE-2014-2505, which allows an attacker to cause the application to download code from an untrusted control sphere, potentially changing functionality. The linked advisory (ESA-2014-071) confirms the vulnerability as one of several in RS...

CVE-2014-0640

CVE-2014-0640 affects EMC RSA Archer GRC Platform 5.x, prior to 5.5 SP1, where remote authenticated users can bypass resource-access restrictions via unspecified vectors. The RSA advisory ESA-2014-071 confirms this vulnerability within the 5.5 SP1 fixes bundle for RSA Archer GRC Platform 5.x. Imp...

CVE-2014-0641

The CVE-2014-0641 issue affects EMC RSA Archer GRC Platform 5.x (up to 5.5 SP1). It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow a remote attacker to hijack an authenticated user’s session in the victim’s browser by enticing the user to click crafted links or similar acti...

CVE-2014-3011

IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors...

CVE-2011-1381

Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors...

Code injection

IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors...

CVE-2011-1381

Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors...

CVE-2014-3011

IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors...

CVE-2011-1381

Technical details for CVE-2011-1381 are not present in the provided documents. The entries only state a generic access-bypass vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4; monitor for future updates.

CVE-2014-3011

IBM OpenPages GRC Platform 6.1.0.1 before IF4 is affected by CVE-2014-3011. The vulnerability allows remote attackers to perform link injection via unspecified vectors, with network access, low attack complexity, no authentication required, and potential partial integrity impact (I). No specific ...

ESA-2014-021: RSA Archer® GRC Multiple Cross-Site Scripting Vulnerabilities

ESA-2014-021.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-021: RSA Archer® GRC Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2014-021 CVE Identifier: CVE-2014-0639 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected Products: RSA Archer...

CVE-2014-0639

CVE-2014-0639 affects RSA Archer GRC 5.x, with fixes only in RSA Archer GRC 5.4 SP1 P3. The ESA-2014-021 advisory confirms multiple cross-site scripting vulnerabilities in RSA Archer GRC 5.4 SP1 P3 platform, allowing an attacker to execute arbitrary HTML/JavaScript in a user’s browser session wit...