Skip to content
Sign in
Not rated

CVE-2017-14370 RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field

Description

RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.

Affected products and versions

Product Affected versions Fixed in
RSA Archer GRC Platform versions prior to 6.2.0.5 Versions not published

Other CVEs of RSA Archer GRC Platform versions prior to 6.2.0.5

The 2 CVEs of RSA Archer GRC Platform versions prior to 6.2.0.5 →
CVE-2017-8016 RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field Not rated
Track this CVE