Lucene search

K

4 matches found

CVE
CVE
added 2024/10/22 5:15 p.m.76 views

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons.

6.5CVSS7.1AI score0.00085EPSS
CVE
CVE
added 2024/10/22 5:15 p.m.39 views

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons.

5.9CVSS7AI score0.00107EPSS
CVE
CVE
added 2024/10/22 5:15 p.m.39 views

CVE-2024-49210

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web applicat...

6.1CVSS6.3AI score0.00169EPSS
CVE
CVE
added 2024/10/22 5:15 p.m.37 views

CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web ap...

6.1CVSS6.3AI score0.00169EPSS