Skip to content
Sign in
2.7 Low

CVE-2018-11065 The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x…

Description

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

Affected products and versions

Product Affected versions Fixed in
RSA Archer 6.4 6.4.x → < 6.4.0.1 6.4.0.1
RSA Archer 6.3 6.3.x → < 6.3.0.7 6.3.0.7

Other CVEs of RSA Archer

The 3 CVEs of RSA Archer →
CVE-2018-11059 RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability 8.2 High CVE-2018-11060 RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API 8.8 High
Track this CVE