CVE-2017-8016

RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting (XSS) via the Questionnaire ID field, allowing an authenticated attacker to execute arbitrary HTML in the user’s browser session. The issue is addressed in version 6.2.0.5 (per Nessus advisory), which also notes m...

CVE-2017-8025

RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may upload malicious files via attachments to arbitrary paths on the web server. Impact details are provided in the NVD entry (CVSS components present) and related adv...