8.2
Élevée
CVE-2020-5334 RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
Description
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RSA Archer | Versions non publiées |
Autres CVE de RSA Archer
Les 12 CVE de RSA Archer →
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Moyenne
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Moyenne
CVE-2020-5337
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
4.6
Moyenne
CVE-2020-5332
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability
7.2
Élevée