3 matches found
CVE-2021-29252
RSA Archer before 6.9 SP1 P1 6.9.1.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser...
PT-2021-18147
Name of the Vulnerable Software and Affected Versions: RSA Archer versions prior to 6.9 SP1 P1 6.9.1.1 Description: The issue allows a remote authenticated malicious user with access to modify link name fields to potentially execute code in a victim's browser. This is achieved through a stored XS...
CVE-2021-29252: Improper Neutralization of Input During Web Page Generation
RSA Archer before 6.9 SP1 P1 6.9.1.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser...