CVE-2020-5336 - RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability

Back Back to CVE browser

MEDIUM

RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability

Published May 4, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.70%

Description

RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability. An unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious JavaScript code on the affected system.

Affected products

Vendor Dell Product RSA Archer Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <6.7 P1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

RSA Archer

n/a

Version	Status	Constraints
unspecified	affected	<6.7 P1

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26518
Advisory
https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26518		Advisory
https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities		x_refsource_MISCThird Party Advisory