4.6
Moyenne
CVE-2020-5337 RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
Description
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RSA Archer | Versions non publiées |
Autres CVE de RSA Archer
Les 12 CVE de RSA Archer →
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Moyenne
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Moyenne
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
Élevée
CVE-2020-5331
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability
8.8
Élevée