Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-37318

Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then reflected to the victim and gets executed by the web browser in the context of the vulnerable web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.

Published

2022-08-25T23:15:08.557

Last Modified

2024-11-21T07:14:45.110

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	rsa	archer	< 6.10.0.4	Yes
Application	rsa	archer	< 6.11.0.2.4	Yes

References

https://archerirm.com Product ([email protected])
https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060 Vendor Advisory ([email protected])
https://archerirm.com Product (af854a3a-2127-422b-91ae-364da2661108)
https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)