CVE-2015-0542

Multiple cross-site request forgery CSRF vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0542

RSA Archer GRC 5.5 SP1 contains multiple Cross-Site Request Forgery (CSRF) vulnerabilities that could allow an attacker to hijack the authentication of arbitrary users. The issue is tied to the RSA Archer GRC platform before the P3 release of 5.5 SP1. According to ESA-2015-094, fixes are included...

CVE-2015-0542: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users...

PT-2015-4705

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC version 5.5 SP1 before P3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of arbitrary users. Recommendations...

ESA-2014-163: RSA Archer® GRC Platform Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-163: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2014-163 CVE Identifier: See below for individual identifiers Severity Rating: View details below for individual CVSSv2 scores Affected Products: RSA Archer GRC Platfo...

CVE-2014-4633

Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4633

CVE-2014-4633 is a persistent Cross-Site Scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x, exploitable in versions prior to 5.5.1.1. The issue could allow an attacker to execute arbitrary HTML/script in a user’s browser session within the affected RSA Archer application. The ESA-2...

CVE-2014-4633

Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-6038

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC Platform versions prior to 5.5.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...

CVE-2014-4633: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[ESNC-2039348] Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance (SAP GRC)

ESNC-2039348 Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance SAP GRC Please refer to http://www.esnc.de for the original security advisory, updates and additional information. ------------------------------------------------------------------------ 1. Business...

Cross site request forgery (csrf)

Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance GRC allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted 1 RFC or 2 SOAP-RFC request...

CVE-2013-3678

Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance GRC allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted 1 RFC or 2 SOAP-RFC request...

CVE-2013-3678

Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance GRC allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted 1 RFC or 2 SOAP-RFC request...

CVE-2013-3678

CVE-2013-3678 affects SAP Governance, Risk, and Compliance (SAP GRC) – Access Control . The vulnerability class includes SoD bypass, privilege escalation, and remote arbitrary program execution . The exposed function referenced in public material is /GRCPI/GRIA_USR_GET_AUTH , with exploitation po...

CVE-2013-3678: Undefined Security Weakness

Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance GRC allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted 1 RFC or 2 SOAP-RFC request...

PT-2014-2697

Name of the Vulnerable Software and Affected Versions SAP Governance, Risk, and Compliance GRC affected versions not specified Description The issue allows remote authenticated users to gain privileges and execute arbitrary programs. This can be achieved by sending a crafted request, either via R...

ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities

ESA-2014-071.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2014-071 CVE Identifier: CVE-2014-2517, CVE-2014-2505, CVE-2014-0640, CVE-2014-0641 Severity Rating: CVSS v2 Base Score: See below for individual scor...

CVE-2014-0640

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors...

CVE-2014-2505

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...